CVE-2026-60603 Oracle Corporation CVE debrief

Who should care

Administrators and users of PeopleSoft Enterprise CS Student Records, version 9.2.38, should be aware of this vulnerability and take necessary precautions to defend against potential attacks. This includes applying patches, restricting network access, and monitoring system logs for suspicious activity.

Technical summary

The vulnerability is located in the Australian Features component of PeopleSoft Enterprise CS Student Records, version 9.2.38. A low-privileged attacker with network access via HTTP can exploit this vulnerability, which has a CVSS score of 8.8, indicating high confidentiality, integrity, and availability impacts. The vulnerability can be exploited to potentially take over the affected system. This vulnerability has been identified as a high-severity issue, and administrators and users of PeopleSoft Enterprise CS Student Records should be aware of this vulnerability and take necessary precautions to defend against potential attacks, including applying patches, restricting network access, and monitoring system logs for suspicious activity. Additional security measures should be implemented to prevent exploitation, and compensating controls should be reviewed for exposed systems while remediation is scheduled and verified.

Defensive priority

High priority should be given to patching or mitigating this vulnerability to prevent potential takeovers.

Recommended defensive actions

• Apply the latest security patches for PeopleSoft Enterprise CS Student Records
• Restrict network access to the affected system
• Monitor system logs for suspicious activity
• Implement additional security measures to prevent exploitation
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record was published on 2026-07-21T22:18:00.530Z and last modified on 2026-07-27T16:18:09.340Z. The NVD entry is currently Undergoing Analysis. There is limited information available about the vulnerability, and defenders should verify the affected scope and severity with the vendor. The vulnerability is located in the Australian Features component of PeopleSoft Enterprise CS Student Records, version 9.2.38.

Official resources