CVE-2026-61232

Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (Common Objects component) affecting version 9.1. An unauthenticated attacker via HTTP can modify data and cause partial denial of service. CVSS 6.5.

Vulnerability in the eProcurement component of PeopleSoft Enterprise FIN Common Objects Brazil (Oracle PeopleSoft) affecting version 9.1. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data accessible in the application.

Vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component eProcurement) version 9.1. A high-privileged attacker with access to the physical communication segment can create, delete, or modify critical data and gain full access to it without authorization.

Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (component: Common Objects) version 9.1. A high-privileged attacker with network access via T3 or IIOP can compromise the system. Successful attacks may result in full takeover of PeopleSoft Enterprise FIN Common Objects Brazil.

Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).

In PeopleSoft Enterprise FIN Common Objects Brazil version 9.1, a vulnerability in the Purchasing component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).