Dashboard / CVE-2026-60596

CVE-2026-60596

LOW
INFO Priority: 0.00 BB Relevance: 25/100
Published: 2026-07-21 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: High
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN eSettlements executes to compromise PeopleSoft Enterprise FIN eSettlements. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FIN eSettlements accessible data. CVSS 3.1 Base Score 2.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
oracle peoplesoft_enterprise_fin_esettlements 9.2

References & Advisories (1)

Bug Bounty Relevance

25 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

2.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.16%
Raw Score 0.001600
Percentile 5.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00160
2026-10-28
0.00160

Intelligence Sources

nvd ref →

External Links