CVE-2026-60602

The record

Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Billing). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Financials. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise CS Student Financials. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected packages

Related vulnerabilities

• CVE-2026-121736 NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the… CWE-306
• CVE-2022-29966 Emerson Ovation has several protocols that have no authentication, which could allow an… CWE-306
• CVE-2026-63482 Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics… CWE-306
• CVE-2026-121557 WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that… CWE-306
• CVE-2026-121555 Foxel through 2.4.0 contains a missing authentication vulnerability that allows… CWE-306
• CVE-2026-121454 Padloc through 4.3.0 contains a missing authentication vulnerability in… CWE-306
• CVE-2026-119740 Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated… CWE-306
• CVE-2026-119731 Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its… CWE-306