High WID-SEC-2026-2440 84 CVEs

Oracle PeopleSoft: Mehrere Schwachstellen

Published Jul 21, 2026 · Updated Jul 21, 2026 · de-DE

Vendor: Oracle Product: PeopleSoft Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle PeopleSoft ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle PeopleSoft ist eine ERP Anwendung.

Vulnerabilities 84

Critical 9.9

CVE-2026-61072

Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft (component: St…

Oracle PeopleSoft Enterprise FIN Staffing Front Office Brazil

Jul 21, 2026
Critical 9.9

CVE-2026-61076

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job …

Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager

Jul 21, 2026
Critical 9.9

CVE-2026-61209

Vulnerability in the PeopleSoft In-Memory Project Discovery product of Oracle PeopleSoft (component: Project Discovery)…

Oracle PeopleSoft In-Memory Project Discovery

Jul 21, 2026
Critical 9.9

CVE-2026-61237

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integr…

Oracle PeopleSoft Enterprise FIN Common Objects Argentina

Jul 21, 2026
Critical 9.9

CVE-2026-61239

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcu…

Oracle PeopleSoft Enterprise FIN Common Objects Argentina

Jul 21, 2026
Critical 9.9

CVE-2026-61242

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffi…

Oracle PeopleSoft Enterprise FIN Common Objects Argentina

Jul 21, 2026
Critical 9.8

CVE-2026-61233

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integrati…

Oracle PeopleSoft Enterprise FIN Common Objects Brazil

Jul 21, 2026
Critical 9.8

CVE-2026-61245

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integratio…

Oracle PeopleSoft Enterprise FIN Manufacturing Brazil

Jul 21, 2026
Critical 9.4

CVE-2026-61203

Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). The support…

Oracle PeopleSoft Enterprise FIN Expenses

Jul 21, 2026
Critical 9.3

CVE-2026-61207

Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition…

Oracle PeopleSoft Enterprise SCM eProcurement

Jul 21, 2026
Critical 9.1

CVE-2026-60606

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Commo…

Oracle PeopleSoft Enterprise CC Common Application Objects

Jul 21, 2026
Critical 9.1

CVE-2026-61059

Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The…

Oracle PeopleSoft Enterprise SCM Order Management

Jul 21, 2026
Critical 9.1

CVE-2026-61235

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Glob…

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland

Jul 21, 2026
Critical 9.1

CVE-2026-61238

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcu…

Oracle PeopleSoft Enterprise FIN Common Objects Argentina

Jul 21, 2026
Critical 9.1

CVE-2026-61244

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle PeopleSoft (component: Manufac…

Oracle PeopleSoft Enterprise FIN Manufacturing Argentina

Jul 21, 2026
Critical 9.0

CVE-2026-61201

Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects).…

Oracle PeopleSoft Enterprise CRM Common Objects

Jul 21, 2026
Critical 9.0

CVE-2026-61204

Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft (component: Primavera In…

Oracle PeopleSoft Enterprise FIN Program Management

Jul 21, 2026
High 8.8

CVE-2026-60594

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and…

Oracle PeopleSoft Enterprise CS Campus Community

Jul 21, 2026
High 8.8

CVE-2026-60602

Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Billing). The…

Oracle PeopleSoft Enterprise CS Student Financials

Jul 21, 2026
High 8.8

CVE-2026-60603

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Australian Featu…

Oracle PeopleSoft Enterprise CS Student Records

Jul 21, 2026
High 8.8

CVE-2026-61062

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management…

Oracle PeopleSoft Enterprise FIN Cash Management

Jul 21, 2026
High 8.8

CVE-2026-61063

Vulnerability in the PeopleSoft Enterprise SCM Supplier Contract Management product of Oracle PeopleSoft (component: Se…

Oracle PeopleSoft Enterprise SCM Supplier Contract Management

Jul 21, 2026
High 8.8

CVE-2026-61243

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffi…

Oracle PeopleSoft Enterprise FIN Common Objects Argentina

Jul 21, 2026
High 8.7

CVE-2026-47017

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Sup…

Oracle PeopleSoft Enterprise PeopleTools

Jul 21, 2026
High 8.7

CVE-2026-60597

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management…

Oracle PeopleSoft Enterprise FIN Cash Management

Jul 21, 2026
High 8.7

CVE-2026-61078

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Commo…

Oracle PeopleSoft Enterprise CC Common Application Objects

Jul 21, 2026
High 8.6

CVE-2025-66021

OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization

OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPo…

OWASP java-html-sanitizer com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer Maven

Nov 26, 2025
High 8.2

CVE-2026-60615

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The …

Oracle PeopleSoft Enterprise CS Campus Community

Jul 21, 2026
High 8.2

CVE-2026-60665

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Glob…

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland

Jul 21, 2026
High 8.2

CVE-2026-60668

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: French Public S…

Oracle PeopleSoft Enterprise HCM Human Resources

Jul 21, 2026
High 8.2

CVE-2026-61089

Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft (component: Security). The suppor…

Oracle PeopleSoft Enterprise SCM Inventory

Jul 21, 2026
High 8.2

CVE-2026-61205

Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The sup…

Oracle PeopleSoft Enterprise SCM Purchasing

Jul 21, 2026
High 8.2

CVE-2026-61240

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eSettl…

Oracle PeopleSoft Enterprise FIN Common Objects Argentina

Jul 21, 2026
High 8.1

CVE-2026-60599

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Trackin…

Oracle PeopleSoft Enterprise CS Student Records

Jul 21, 2026
High 8.1

CVE-2026-61074

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurem…

Oracle PeopleSoft Enterprise FIN Common Objects Brazil

Jul 21, 2026
High 7.8

CVE-2026-60600

Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The …

Oracle PeopleSoft Enterprise FIN Project Costing

Jul 21, 2026
High 7.8

CVE-2026-61055

Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The…

Oracle PeopleSoft Enterprise SCM Order Management

Jul 21, 2026
High 7.5

CVE-2025-59465

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unh…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jan 20, 2026
High 7.5

CVE-2026-60593

Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft (component: Staffing …

Oracle PeopleSoft Enterprise FIN Staffing Front Office

Jul 21, 2026
High 7.5

CVE-2026-60598

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Trackin…

Oracle PeopleSoft Enterprise CS Student Records

Jul 21, 2026
High 7.5

CVE-2026-60604

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The …

Oracle PeopleSoft Enterprise CS Campus Community

Jul 21, 2026
High 7.5

CVE-2026-60605

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Higher Ed Statis…

Oracle PeopleSoft Enterprise CS Student Records

Jul 21, 2026
High 7.5

CVE-2026-61073

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Purchasin…

Oracle PeopleSoft Enterprise FIN Common Objects Brazil

Jul 21, 2026
High 7.5

CVE-2026-61077

Vulnerability in the PeopleSoft Enterprise SCM Mobile Inventory Management product of Oracle PeopleSoft (component: Sec…

Oracle PeopleSoft Enterprise SCM Mobile Inventory Management

Jul 21, 2026
High 7.5

CVE-2026-61085

Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft (component: Security). The suppor…

Oracle PeopleSoft Enterprise SCM Inventory

Jul 21, 2026
High 7.5

CVE-2026-61086

Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The…

Oracle PeopleSoft Enterprise SCM Order Management

Jul 21, 2026
High 7.5

CVE-2026-61087

Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Security). The support…

Oracle PeopleSoft Enterprise FIN Payables

Jul 21, 2026
High 7.5

CVE-2026-61088

Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The su…

Oracle PeopleSoft Enterprise SCM Manufacturing

Jul 21, 2026
High 7.5

CVE-2026-61232

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Ob…

Oracle PeopleSoft Enterprise FIN Common Objects Brazil

Jul 21, 2026
High 7.5

CVE-2026-61236

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Staffing)…

Oracle PeopleSoft Enterprise FIN Common Objects Brazil

Jul 21, 2026
High 7.4

CVE-2026-47026

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards).…

Oracle PeopleSoft Enterprise PeopleTools

Jul 21, 2026
High 7.4

CVE-2026-60667

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Core). The supp…

Oracle PeopleSoft Enterprise HCM Human Resources

Jul 21, 2026
High 7.4

CVE-2026-61210

Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The su…

Oracle PeopleSoft Enterprise SCM Manufacturing

Jul 21, 2026
High 7.4

CVE-2026-61234

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurem…

Oracle PeopleSoft Enterprise FIN Common Objects Brazil

Jul 21, 2026
High 7.2

CVE-2026-61068

Vulnerability in the PeopleSoft Enterprise FIN Billing Argentina product of Oracle PeopleSoft (component: Billing). The…

Oracle PeopleSoft Enterprise FIN Billing Argentina

Jul 21, 2026
High 7.1

CVE-2026-47015

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). T…

Oracle PeopleSoft Enterprise PeopleTools

Jul 21, 2026
High 7.1

CVE-2026-60614

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Person Data). T…

Oracle PeopleSoft Enterprise CS Campus Community

Jul 21, 2026
Medium 6.8

CVE-2026-60612

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Commonline Loans).…

Oracle PeopleSoft Enterprise CS Financial Aid

Jul 21, 2026
Medium 6.8

CVE-2026-60666

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Security). The …

Oracle PeopleSoft Enterprise HCM Human Resources

Jul 21, 2026
Medium 6.6

CVE-2026-60613

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Trackin…

Oracle PeopleSoft Enterprise CS Student Records

Jul 21, 2026
Medium 6.5

CVE-2025-68431

libheif has Potential Heap Buffer Over-Read

libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likel…

strukturag libheif libheif libheif Debian Ubuntu Alpine

Dec 29, 2025
Medium 6.5

CVE-2026-60609

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Communication).…

Oracle PeopleSoft Enterprise CS Campus Community

Jul 21, 2026
Medium 6.5

CVE-2026-60616

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The …

Oracle PeopleSoft Enterprise CS Campus Community

Jul 21, 2026
Medium 6.5

CVE-2026-60617

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The …

Oracle PeopleSoft Enterprise CS Campus Community

Jul 21, 2026
Medium 6.1

CVE-2026-60608

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Institutional Meth…

Oracle PeopleSoft Enterprise CS Financial Aid

Jul 21, 2026
Medium 5.9

CVE-2026-60610

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The …

Oracle PeopleSoft Enterprise CS Campus Community

Jul 21, 2026
Medium 5.9

CVE-2026-60669

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Mexico product of Oracle PeopleSoft (component: Global Pa…

Oracle PeopleSoft Enterprise HCM Global Payroll Mexico

Jul 21, 2026
Medium 5.9

CVE-2026-61069

Vulnerability in the PeopleSoft Enterprise FIN General Ledger Argentina product of Oracle PeopleSoft (component: Genera…

Oracle PeopleSoft Enterprise FIN General Ledger Argentina

Jul 21, 2026
Medium 5.9

CVE-2026-61103

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The …

Oracle PeopleSoft Enterprise CS Campus Community

Jul 21, 2026
Medium 5.5

CVE-2026-60595

Vulnerability in the PeopleSoft Enterprise FIN Pay/Bill Management product of Oracle PeopleSoft (component: Paybill Man…

Oracle PeopleSoft Enterprise FIN Pay/Bill Management

Jul 21, 2026
Medium 5.5

CVE-2026-60607

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: FM Need Analysis C…

Oracle PeopleSoft Enterprise CS Financial Aid

Jul 21, 2026
Medium 5.4

CVE-2026-47024

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). The s…

Oracle PeopleSoft Enterprise PeopleTools

Jul 21, 2026
Medium 5.4

CVE-2026-47048

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported ve…

Oracle PeopleSoft Enterprise PeopleTools

Jul 21, 2026
Medium 5.4

CVE-2026-47051

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported ve…

Oracle PeopleSoft Enterprise PeopleTools

Jul 21, 2026
Medium 5.4

CVE-2026-60152

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Suppo…

Oracle PeopleSoft Enterprise PeopleTools

Jul 21, 2026
Medium 5.3

CVE-2026-60611

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The …

Oracle PeopleSoft Enterprise CS Campus Community

Jul 21, 2026
Medium 5.3

CVE-2026-61070

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Cash M…

Oracle PeopleSoft Enterprise FIN Common Objects Argentina

Jul 21, 2026
Medium 4.9

CVE-2026-47049

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). S…

Oracle PeopleSoft Enterprise PeopleTools

Jul 21, 2026
Medium 4.8

CVE-2026-61056

Vulnerability in the PeopleSoft Enterprise FIN Grants product of Oracle PeopleSoft (component: Grants). The supported v…

Oracle PeopleSoft Enterprise FIN Grants

Jul 21, 2026
Medium 4.8

CVE-2026-61057

Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The…

Oracle PeopleSoft Enterprise FIN eSettlements

Jul 21, 2026
Medium 4.4

CVE-2026-60601

Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Security). The s…

Oracle PeopleSoft Enterprise FIN Common Objects

Jul 21, 2026
Low 3.7

CVE-2026-61104

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Trackin…

Oracle PeopleSoft Enterprise CS Student Records

Jul 21, 2026
Low 3.3

CVE-2026-61071

Vulnerability in the PeopleSoft Enterprise FIN Engineering Argentina product of Oracle PeopleSoft (component: Engineeri…

Oracle PeopleSoft Enterprise FIN Engineering Argentina

Jul 21, 2026
Low 2.3

CVE-2026-60596

Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The…

Oracle PeopleSoft Enterprise FIN eSettlements

Jul 21, 2026

Revision history

2026-07-21 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - July 2026 - Appendix Oracle PeopleSoft vom 2026-07-21
https://www.oracle.com/security-alerts/cpujul2026.html#AppendixPS