中文

// CVE · PUBLISHED 2026-07-21

CVE-2026-61201

Oracle Corporation / PeopleSoft Enterprise CRM Common Objects

9.0 · CVSS 3.1Critical

Description

Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.2.23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CRM Common Objects. While the vulnerability is in PeopleSoft Enterprise CRM Common Objects, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise CRM Common Objects. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-61209Oracle Corporation / PeopleSoft In-Memory Project DiscoveryCVSS 9.9
  • CVE-2026-61207Oracle Corporation / PeopleSoft Enterprise SCM eProcurementCVSS 9.3
  • CVE-2026-61204Oracle Corporation / PeopleSoft Enterprise FIN Program ManagementCVSS 9.0
  • CVE-2026-61203Oracle Corporation / PeopleSoft Enterprise FIN ExpensesCVSS 9.4
  • CVE-2026-61197Oracle Corporation / Oracle Identity ManagerCVSS 9.1
  • CVE-2026-61196Oracle Corporation / Oracle Identity ManagerCVSS 9.8
  • CVE-2026-61186Oracle Corporation / Oracle Agile Engineering Data ManagementCVSS 9.4
  • CVE-2026-61184Oracle Corporation / Oracle Agile Product Lifecycle Management for ProcessCVSS 9.1

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.