CVE-2025-30735

CVE-2025-30735 affects Oracle PeopleSoft Enterprise CC Common Application Objects, component: Page and Field Configuration, version 9.2. The vulnerability exists when exposed over HTTP via a network, allowing a low-privileged attacker to perform unauthorized create, delete, or modify actions on c...

CVE-2025-21563

CVE-2025-21563 affects Oracle PeopleSoft, Run Control Management in the CC Common Application Objects component (PeopleSoft 9.2). The issue allows a low-privilege attacker with network access over HTTP to perform unauthorized updates, inserts, or deletes on affected data. Root cause details are n...

CVE-2025-21562

CVE-2025-21562 concerns Oracle PeopleSoft PeopleSoft Enterprise CC Common Application Objects (Run Control Management) version 9.2. The vulnerability allows a low-privileged attacker with network access over HTTP to read a subset of data from the affected object, with CVSS 3.1 base score 4.3 (Con...

CVE-2026-61307

Affected product: Oracle PeopleSoft Enterprise CC Common Application Objects, version 9.2. Root cause/impact: Unauthenticated, network-accessible attacker via Oracle Net can achieve full takeover of the application (C/I/A HIGH), CVSS 8.1. Remediation: Oracle's August 2026 Critical Patch Update ad...

CVE-2026-60606

CVE-2026-60606 affects Oracle PeopleSoft (CC Common Application Objects) on version 9.2. The vulnerability is in the Common Application Objects component and is exploitable without authentication over HTTP, enabling unauthorized creation/modification/deletion of data and access to all CC Common A...

CVE-2026-61078

CVE-2026-61078 affects Oracle PeopleSoft 9.2, specifically the CC Common Application Objects component. The flaw exists in the Common Application Objects and can be exploited by a low-privilege, network-connected attacker over HTTP; exploitation requires user interaction. Impact is unauthorized c...