CVE-2026-61204

Description

Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft (component: Primavera Integration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Program Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise FIN Program Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Program Management. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-61204 ↗
• www.oracle.com/security-alerts/cpujul2026.html ↗

Related CVEs

• CVE-2026-61223Oracle Corporation / Oracle Communications Converged Application ServerCVSS 9.0
• CVE-2026-61211Oracle Corporation / Oracle Database ServerCVSS 9.9
• CVE-2026-61209Oracle Corporation / PeopleSoft In-Memory Project DiscoveryCVSS 9.9
• CVE-2026-61207Oracle Corporation / PeopleSoft Enterprise SCM eProcurementCVSS 9.3
• CVE-2026-61203Oracle Corporation / PeopleSoft Enterprise FIN ExpensesCVSS 9.4
• CVE-2026-61201Oracle Corporation / PeopleSoft Enterprise CRM Common ObjectsCVSS 9.0
• CVE-2026-61197Oracle Corporation / Oracle Identity ManagerCVSS 9.1
• CVE-2026-61196Oracle Corporation / Oracle Identity ManagerCVSS 9.8