by Kastro
Paper/Archive/CVE-2026-61201

CVE-2026-61201

Oracle Corporation PeopleSoft Enterprise CRM Common Objects — Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects).

EPSS 0.4%CVSS 9.0
critical.is priorityof 100
34
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 33.4.334 × 206.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.2.23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CRM Common Objects. While the vulnerability is in PeopleSoft Enterprise CRM Common Objects, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise CRM Common Objects. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

Affected

ProductAffectedFixed inSource
PeopleSoft Enterprise CRM Common Objects9.2.23–CNA

Scores by source

oracle (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryoracle.com/security-alerts/cpujul2026.html