中文

// CVE · PUBLISHED 2026-07-21

CVE-2026-61076

Oracle Corporation / PeopleSoft Enterprise HCM Talent Acquisition Manager

9.9 · CVSS 3.1Critical

Description

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Talent Acquisition Manager. While the vulnerability is in PeopleSoft Enterprise HCM Talent Acquisition Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise HCM Talent Acquisition Manager. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-61130Oracle Corporation / Oracle Commerce PlatformCVSS 9.1
  • CVE-2026-61129Oracle Corporation / Oracle Commerce PlatformCVSS 9.8
  • CVE-2026-61100Oracle Corporation / Oracle WebCenter Enterprise CaptureCVSS 9.8
  • CVE-2026-61097Oracle Corporation / Oracle Banking Trade Finance Process ManagementCVSS 9.6
  • CVE-2026-61072Oracle Corporation / PeopleSoft Enterprise FIN Staffing Front Office BrazilCVSS 9.9
  • CVE-2026-61065Oracle Corporation / Oracle Access ManagerCVSS 9.8
  • CVE-2026-61059Oracle Corporation / PeopleSoft Enterprise SCM Order ManagementCVSS 9.1
  • CVE-2026-61041Oracle Corporation / Oracle Demantra Demand ManagementCVSS 9.9

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.