CVE-2026-60869 Oracle Corporation CVE debrief

Who should care

System administrators and security teams responsible for PeopleSoft Enterprise PeopleTools should assess exposure and prioritize remediation. They must also monitor systems for unauthorized access and data modifications, and verify affected versions and remediation status.

Why it matters

CVE-2026-60869 is a medium-severity vulnerability in PeopleSoft Enterprise PeopleTools that allows low-privileged attackers to potentially modify data and disrupt services. System administrators and security teams should assess exposure, prioritize remediation, and monitor systems for unauthorized access and data modifications.

• Potential unauthorized data modification
• Potential service disruption (complete DOS)
• Requires verification of affected versions and remediation status
• Requires monitoring for unauthorized access and data modifications

Technical summary

The vulnerability is in the Application Data Sets component of PeopleSoft Enterprise PeopleTools. It allows low-privileged attackers with network access via HTTP to compromise the system, potentially leading to unauthorized creation, deletion, or modification of critical data and causing a hang or frequently repeatable crash of PeopleSoft Enterprise PeopleTools. The vulnerability affects PeopleSoft Enterprise PeopleTools versions 8.61-8.63 and has a CVSS 3.1 Base Score of 6.8, indicating medium severity. It is difficult to exploit and requires low privileges.

Defensive priority

Medium

Recommended defensive actions

• Review and apply Oracle's security patches for PeopleSoft Enterprise PeopleTools versions 8.61-8.63.
• Restrict network access to PeopleSoft Enterprise PeopleTools to only necessary personnel.
• Monitor PeopleSoft Enterprise PeopleTools systems for unauthorized data modifications and service disruptions.
• Verify affected versions and remediation status.
• Track exceptions and retest remediated assets.
• whoShouldCare
• technicalSummary

Evidence notes

The vulnerability affects PeopleSoft Enterprise PeopleTools versions 8.61-8.63. It has a CVSS 3.1 Base Score of 6.8, indicating medium severity. The vulnerability is difficult to exploit and requires low privileges.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.