Skip to content
OracleCVE-2026-61307

PeopleSoft Enterprise CC Common Application Objects: takeover via Common...

High8.1CVE-2026-61307 · Published Aug 18, 2026 · updated Sep 4, 2026

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise CC Common Application Objects. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Oracle advisory

Affected versions

PackageAffectedFixed in
PeopleSoft Enterprise CC Common Application Objects
Product
<= 9.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-284, CWE-306

More Oracle advisories

All Oracle
Advisory
Helidon: data tampering via Imperative Web Server
High8.6Aug 18
Helidon: data tampering via Imperative Web Server
Critical9.9Aug 18
Helidon: data tampering via Imperative Web Server
High8.3Aug 18
Helidon: flaw in Imperative Web Server
Medium5.3Aug 18
Helidon: data tampering via Imperative Web Server
High7.3Aug 18
Helidon: denial of service via Imperative Web Server
High7.5Aug 18

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.