CVE-2026-61235
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
PeopleSoft Enterprise HCM Global Payroll Switzerland (version 9.2) contains a vulnerability that allows a high-privileged authenticated attacker to compromise the system via HTTP. The attack may impact other products (scope change).
Risk Assessment
A high-privileged attacker can fully compromise the PeopleSoft Payroll system for Switzerland, leading to loss of confidentiality, integrity, and availability of payroll data and potentially other systems.
Recommendation
Apply the security patch from Oracle for PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 or restrict network access to the system to trusted users only.
Other vulnerabilities in PeopleSoft Enterprise HCM Global Payroll Switzerland
See all- CVE-2026-91356Medium
Vulnerability in PeopleSoft Enterprise HCM Global Payroll Switzerland (component Global Payroll for Switzerland) affecting version 9.2. An easily exploitable attack by a high-privileged attacker with logon to the infrastructure can result in unauthorized update, insert, or delete access to some data, unauthorized read access to a subset of data, and partial denial of service.
- CVE-2026-60665High
Vulnerability in PeopleSoft Enterprise HCM Global Payroll Switzerland (version 9.2) allows a low-privileged attacker over HTTP to gain unauthorized access and modify critical data. Exploitation is difficult and impacts other products.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Global Payroll Switzerland. While the vulnerability is in PeopleSoft Enterprise HCM Global Payroll Switzerland, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise HCM Global Payroll Switzerland. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS