CVE-2026-61070

Analyzed Analyzed - Analysis Complete

Denial of Service in PeopleSoft Enterprise FIN Common Objects Argentina

Publication date: 2026-07-21

Last updated on: 2026-07-31

Assigner: Oracle

Description

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Argentina. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise FIN Common Objects Argentina. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-31

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-61070

EUVD

EUVD-2026-47281

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	peoplesoft_enterprise_fin_common_objects	9.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1. It allows an unauthenticated attacker with network access via HTTP to cause a partial denial of service (DOS) in the affected product. The vulnerability has a CVSS base score of 5.3, indicating low to medium severity with availability impact.

Detection Guidance

Detection requires checking for exposed PeopleSoft Enterprise FIN Common Objects Argentina instances (version 9.1) accessible via HTTP. Monitor network traffic for unusual requests targeting PeopleSoft components. Verify if the service is running on default ports (typically 8000, 8443) and inspect logs for partial denial of service attempts.

Impact Analysis

If exploited, this vulnerability could disrupt the availability of PeopleSoft Enterprise FIN Common Objects Argentina, leading to partial service outages. This may affect financial operations, reporting, or other critical functions relying on this system.

Compliance Impact

This vulnerability causes partial denial of service in PeopleSoft Enterprise FIN Common Objects Argentina, which could disrupt financial transaction processing. Such disruptions may impact compliance with GDPR (data availability requirements) and HIPAA (system availability for healthcare data). However, specific compliance impacts depend on system configuration and usage.

Mitigation Strategies

Apply the latest security patches from Oracle for PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-61070. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70