CVE-2026-61201: Critical severity Oracle PeopleSoft Enterprise CRM Common Objects vulnerability
Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.2.23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CRM Common Objects. While the vulnerability is in PeopleSoft Enterprise CRM Common Objects, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise CRM Common Objects. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61201?
CVE-2026-61201 has a critical severity rating of 9.
How do I fix CVE-2026-61201?
To fix CVE-2026-61201, you should apply the latest security patches provided by Oracle for version 9.2.23 of PeopleSoft Enterprise CRM.
Who is affected by CVE-2026-61201?
CVE-2026-61201 affects users of the Oracle PeopleSoft Enterprise CRM Common Objects product specifically version 9.2.23.
Can CVE-2026-61201 be exploited remotely?
Yes, CVE-2026-61201 can be exploited by unauthenticated attackers with network access via HTTP.
What type of vulnerability is CVE-2026-61201?
CVE-2026-61201 is considered a difficult-to-exploit vulnerability that affects the Common Objects component of Oracle PeopleSoft.