Description
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Global Payroll Switzerland. While the vulnerability is in PeopleSoft Enterprise HCM Global Payroll Switzerland, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise HCM Global Payroll Switzerland. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Published: 2026-07-21
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw exists in the Global Payroll for Switzerland component of Oracle PeopleSoft Enterprise HCM and is a permissions-related access control weakness (CWE-284). A high-privileged attacker who can reach the application over HTTP can exploit the vulnerability to achieve full control of the affected system, resulting in loss of confidentiality, integrity and availability.

Affected Systems

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 is impacted.

Risk and Exploitability

The CVSS v3.1 base score of 9.1 places the flaw in the critical range, and the attack requires only network access over HTTP. The EPSS score of less than 1% indicates that active exploitation is currently rare, and the flaw is not listed in CISA's KEV catalog. Nevertheless, because the attack vector is network-based and the impact is total system takeover, the risk remains high for affected deployments.

Generated by OpenCVE AI on August 4, 2026 at 01:17 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Oracle patch released in July 2026 to upgrade PeopleSoft Enterprise HCM Global Payroll Switzerland to a fixed version.
  • Block unnecessary HTTP access to the application by configuring firewalls or access control lists to limit connections to trusted internal hosts.
  • Enforce strict role-based access controls and verify that only authorized users have high-privilege privileges required to access the payroll application.

Generated by OpenCVE AI on August 4, 2026 at 01:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 01:45:00 +0000

Type Values Removed Values Added
Title High Privilege Remote Code Execution in Oracle PeopleSoft Global Payroll Switzerland

Sat, 01 Aug 2026 04:30:00 +0000

Type Values Removed Values Added
Title High Privilege Remote Code Execution in Oracle PeopleSoft Global Payroll Switzerland

Tue, 28 Jul 2026 19:30:00 +0000

Type Values Removed Values Added
Title High Privilege Network Exploit in Oracle PeopleSoft Global Payroll Switzerland

Fri, 24 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Title High Privilege Network Exploit in Oracle PeopleSoft Global Payroll Switzerland

Wed, 22 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 21 Jul 2026 22:00:00 +0000

Type Values Removed Values Added
Description Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Global Payroll Switzerland. While the vulnerability is in PeopleSoft Enterprise HCM Global Payroll Switzerland, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise HCM Global Payroll Switzerland. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
First Time appeared Oracle
Oracle peoplesoft Enterprise Hcm Global Payroll Switzerland
CPEs cpe:2.3:a:oracle:peoplesoft_enterprise_hcm_global_payroll_switzerland:9.2:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle peoplesoft Enterprise Hcm Global Payroll Switzerland
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Oracle Peoplesoft Enterprise Hcm Global Payroll Switzerland
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-07-22T19:29:05.816Z

Reserved: 2026-07-08T15:52:20.742Z

Link: CVE-2026-61235

cve-icon Vulnrichment

Updated: 2026-07-22T19:29:01.150Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T01:30:04Z

Weaknesses