Back to overview

CVE-2026-61062

HIGH

8.8

CVSS 3.1

Metadata

CVE ID: CVE-2026-61062
State: PUBLISHED
Assigner: oracle
Reserved: 2026-07-08 15:51 UTC
Published: 2026-07-21 21:37 UTC
Last updated: 2026-07-21 21:37 UTC
Vendor / Product: Oracle Corporation / PeopleSoft Enterprise FIN Cash Management
Sources: cve.org · NVD

Severity & Metrics

8.8 HIGH CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products (1)

Vendor	Product	Platform	Versions
Oracle Corporation	PeopleSoft Enterprise FIN Cash Management	—	9.2

Weakness (CWE)

CWE	Source	Description
—	cna	Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Cash Management executes to compromise PeopleSoft Enterprise FIN Cash Management. While the vulnerability is in PeopleSoft Enterprise FIN Cash Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Cash Management.

CVSS scores (1)

Score	Severity	Version	Source	Vector
8.8	HIGH	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References (1)

Oracle Advisory https://www.oracle.com/security-alerts/cpujul2026.html

Back to overview