Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-61245: Oracle PeopleSoft FIN Manufacturing Brazil Can Be Taken Over
CVE-2026-61245
CVE-2026-61245
Summary
An attacker with network access can take control of Oracle PeopleSoft's FIN Manufacturing Brazil system. This is a serious issue because it could allow unauthorized access and disruption of business operations. Oracle PeopleSoft recommends upgrading to a supported version to mitigate this risk.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| oracle corporation | peoplesoft enterprise fin manufacturing brazil | 9.1 |
Original title
Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulner...
Original description
Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise FIN Manufacturing Brazil. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Manufacturing Brazil. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
nvd CVSS3.1
9.8
Vulnerability type
CWE-284
Improper Access Control
CWE-306
Missing Authentication for Critical Function
Published: 21 Jul 2026 · Updated: 23 Jul 2026 · First seen: 22 Jul 2026