Vulnerability in Oracle Peoplesoft Enterprise Fin Staffing Front Office
CVE-2026-60593
Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft (component: Staffing Front Office). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Staffing Front Office. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise FIN Staffing Front Office accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).
EPSS: 0.003 (25.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Oracle Peoplesoft_enterprise_fin_staffing_front_office — versions 9.2
- Oracle Corporation Peoplesoft Enterprise Fin Staffing Front Office — versions 9.2
Weakness classification (CWE)
References
- secalert_us@oracle.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-60593?
- CVE-2026-60593 is a high-severity vulnerability in Oracle Peoplesoft Enterprise Fin Staffing Front Office, classified under Improper Access Control. CVSS score: 7.5/10. Published 2026-07-21.
- How severe is CVE-2026-60593?
- High severity. CVSS v3 base score is 7.5 out of 10.