CVE-2026-60609

Received Received - Intake

PeopleSoft CS Campus Community Information Disclosure

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: Oracle

Description

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Communication). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-21

Generated

2026-07-22

AI Q&A

2026-07-22

EPSS Evaluated

N/A

NVD

CVE-2026-60609

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	peoplesoft_enterprise_cs_campus_community	9.2.38

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle PeopleSoft Enterprise CS Campus Community version 9.2.38. It allows a low-privileged attacker with network access via HTTPS to exploit a flaw in the Communication component. Successful exploitation could lead to unauthorized access to critical data or complete access to all accessible data within the system.

Impact Analysis

If you use the affected version of PeopleSoft Enterprise CS Campus Community, an attacker could gain access to sensitive data stored in the system. This may include personal, financial, or confidential information, depending on what data is stored and processed by the application.

Compliance Impact

This vulnerability could lead to unauthorized data access, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Unauthorized access to personal or health data could result in legal penalties, fines, or reputational damage for organizations handling such data.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update for PeopleSoft Enterprise CS Campus Community version 9.2.38 or later to address the vulnerability. Ensure network access controls restrict low-privileged users from accessing the HTTPS interface. Monitor for unauthorized access attempts to critical data.

Hi! I’m here to help you understand CVE-2026-60609. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70