What is the CVSS score of EUVD-2026-47283?

EUVD-2026-47283 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

How to fix or mitigate EUVD-2026-47283?

Within 24 hours: inventory all PeopleSoft FIN Staffing 9.1 deployments, identify systems exposed to low-privileged users or untrusted networks, and enable comprehensive audit logging on the Staffing component. Within 7 days: implement network segmentation and firewall rules to restrict HTTP access to FIN Staffing servers to authorized personnel only, apply principle of least privilege to limit low-privileged user access within the module, and establish continuous monitoring for authentication failures and privilege escalation attempts. Within 30 days: monitor Oracle's Critical Patch Update program for an available patch and prepare an emergency patching process; conduct weekly access and vulnerability reviews; evaluate whether non-production instances can be air-gapped or temporarily disabled.

Peoplesoft Enterprise Fin Staffing Front Office Brazil EUVD-2026-47283

| CVE-2026-61072 CRITICAL

Improper Access Control (CWE-284)

2026-07-21 secalert_us@oracle.com

GHSA-xhrq-972v-p2vm

Authentication Bypass Microsoft Oracle Peoplesoft Enterprise Fin Staffing Front Office Brazil

9.9

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from Vendor (oracle) · only source for this CVE.

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 00:59 vuln.today

CVE Published

Jul 21, 2026 - 22:18 nvd

CRITICAL 9.9

DescriptionCVE.org

Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft (component: Staffing). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Staffing Front Office Brazil. While the vulnerability is in PeopleSoft Enterprise FIN Staffing Front Office Brazil, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Staffing Front Office Brazil. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

AnalysisAI

Privilege-to-takeover in Oracle PeopleSoft Enterprise FIN Staffing Front Office Brazil 9.1 (Staffing component) lets a low-privileged attacker with HTTP access fully compromise the module, and because of a scope change (CVSS S:C) the attack can significantly impact additional PeopleSoft products beyond the vulnerable component. Oracle rates this 9.9 (Critical) with full confidentiality, integrity, and availability impact. No public exploit identified at time of analysis; disclosed via the Oracle Critical Patch Update of July 2026.