Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Oracle Corporation | PeopleSoft Enterprise HCM Human Resources | affected |
|
No data.
| Vendor | Product | Confidence | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | Peoplesoft Enterprise Hcm Human Resources | 95% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2026.html |
|
Thu, 13 Aug 2026 13:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated Network Attacker Can Modify Critical Data and Induce Denial of Service in PeopleSoft Enterprise HCM Human Resources |
Thu, 13 Aug 2026 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated Network Access Allows Data Manipulation and Denial of Service in Oracle PeopleSoft Enterprise HCM Human Resources 9.2 | |
| Weaknesses | CWE-285 |
Wed, 05 Aug 2026 02:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated Network Access Allows Data Manipulation and Denial of Service in Oracle PeopleSoft Enterprise HCM Human Resources 9.2 | |
| Weaknesses | CWE-285 |
Tue, 04 Aug 2026 03:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated Network Access in Oracle PeopleSoft Allows Data Tampering and Denial of Service | |
| Weaknesses | CWE-284 |
Thu, 30 Jul 2026 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated Network Access in Oracle PeopleSoft Allows Data Tampering and Denial of Service | |
| Weaknesses | CWE-284 |
Mon, 27 Jul 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated Remote Access to Modify Data and Cause DoS in Oracle PeopleSoft HCM | |
| Weaknesses | CWE-284 |
Thu, 23 Jul 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated Remote Access to Modify Data and Cause DoS in Oracle PeopleSoft HCM | |
| Weaknesses | CWE-284 |
Tue, 21 Jul 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Core). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise HCM Human Resources accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise HCM Human Resources. CVSS 3.1 Base Score 7.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H). | |
| First Time appeared |
Oracle
Oracle peoplesoft Enterprise Hcm Human Resources |
|
| CPEs | cpe:2.3:a:oracle:peoplesoft_enterprise_hcm_human_resources:9.2:*:*:*:*:*:*:* | |
| Vendors & Products |
Oracle
Oracle peoplesoft Enterprise Hcm Human Resources |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2026-07-24T19:25:05.965Z
Reserved: 2026-07-08T15:51:55.576Z
Link: CVE-2026-60667
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2026-07-21T22:18:07.620
Modified: 2026-08-03T12:49:02.690
Link: CVE-2026-60667
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-08-13T13:00:04Z