CVE-2026-60665 Oracle Corporation CVE debrief

Who should care

Organizations using PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2 should be aware of this high-severity vulnerability and take immediate action to patch or mitigate the risk. Additionally, security teams and administrators responsible for PeopleSoft systems should prioritize patching and monitoring to prevent potential exploitation.

Technical summary

The CVE-2026-60665 vulnerability affects PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2, allowing low-privileged attackers with network access via HTTP to compromise the system. The vulnerability has a CVSS 3.1 Base Score of 8.2, indicating high severity due to its impact on confidentiality and integrity. Successful attacks can result in unauthorized creation, deletion, or modification access to critical data or all accessible data.

Defensive priority

Organizations using PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2 should prioritize patching due to the high CVSS score of 8.2 and potential impact on confidentiality and integrity.

Recommended defensive actions

• Apply patches or updates provided by Oracle to address the vulnerability in PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2.
• Restrict network access to the affected system to minimize the attack surface.
• Monitor system logs for suspicious activity related to the vulnerability.
• Perform regular security audits to identify and address potential vulnerabilities.
• Implement compensating controls, such as Web Application Firewalls, to detect and prevent exploitation attempts.

Evidence notes

The CVE-2026-60665 record indicates a difficult-to-exploit vulnerability in PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2, allowing low-privileged attackers with network access via HTTP to compromise the system, potentially impacting additional products. Successful attacks can result in unauthorized creation, deletion, or modification access to critical data or all accessible data. The CVSS 3.1 Base Score is 8.2, indicating high severity.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.