CVE-2026-60596: Low severity Oracle PeopleSoft Enterprise FIN eSettlements vulnerability
Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN eSettlements executes to compromise PeopleSoft Enterprise FIN eSettlements. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FIN eSettlements accessible data. CVSS 3.1 Base Score 2.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60596?
CVE-2026-60596 has a low severity rating of 2.3.
How do I fix CVE-2026-60596?
To fix CVE-2026-60596, update to the latest version of Oracle PeopleSoft Enterprise FIN eSettlements as provided by Oracle.
Who is affected by CVE-2026-60596?
The vulnerability affects users of Oracle PeopleSoft Enterprise FIN eSettlements version 9.2.
What type of access is required to exploit CVE-2026-60596?
A high privileged attacker with logon access to the infrastructure is required to exploit CVE-2026-60596.
What impact does CVE-2026-60596 have on data security?
CVE-2026-60596 allows an attacker to potentially access limited data within the People'sSoft application.