CVE-2026-60607: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft component: FM Need Analysis Calculator. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

CVE-2026-60608: Improper Access Control

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft component: Institutional Methodology Need Analysis. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-60612: Improper Access Control

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft component: Commonline Loans. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpris...

Unspecified Security Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise CS Financial Aid Component

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise CS Financial Aid is one of the financial management components. An...

CVE-2018-3076

Vulnerability in the PeopleSoft Enterprise CS Financial Aid component of Oracle PeopleSoft Products subcomponent: ISIR Processing. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2018-3076: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Financial Aid component of Oracle PeopleSoft Products subcomponent: ISIR Processing. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...