What is the CVSS score of EUVD-2026-47427?

EUVD-2026-47427 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of Peoplesoft Enterprise Hcm Global Payroll Switzerland are affected by EUVD-2026-47427?

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2 is vulnerable to complete system takeover by internal users with elevated access rights (CVE-2026-61235), directly threatening the…

How to fix or mitigate EUVD-2026-47427?

Within 24 hours: Identify and inventory all systems running Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2, immediately restrict application access to essential personnel only, and audit high-privilege account activity for signs of compromise. Within 7 days: Implement network segmentation isolating the payroll module from other PeopleSoft systems, enable enhanced logging of database and application changes, and contact Oracle Support to request an estimated patch timeline and any interim security guidance. Within 30 days: Monitor Oracle advisories for patch availability and apply immediately upon release, conduct full review of all high-privilege account access, and analyze audit logs from the unpatched period for unauthorized access attempts.

Peoplesoft Enterprise Hcm Global Payroll Switzerland EUVD-2026-47427

| CVE-2026-61235 CRITICAL

Improper Access Control (CWE-284)

2026-07-21 secalert_us@oracle.com

GHSA-m283-v7m6-qw64

Authentication Bypass Oracle Peoplesoft Enterprise Hcm Global Payroll Switzerland

9.1

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from Vendor (oracle) · only source for this CVE.

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 00:06 vuln.today

CVE Published

Jul 21, 2026 - 22:18 nvd

CRITICAL 9.1

DescriptionCVE.org

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Global Payroll Switzerland. While the vulnerability is in PeopleSoft Enterprise HCM Global Payroll Switzerland, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise HCM Global Payroll Switzerland. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

AnalysisAI

Full takeover of Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2 is possible via network-facing HTTP by an attacker who already holds high application privileges, per Oracle's July 2026 Critical Patch Update. Because the flaw carries a scope change, successful attacks can reach beyond the Global Payroll Switzerland component into additional PeopleSoft products, yielding full confidentiality, integrity, and availability loss. No public exploit identified at time of analysis, but the low attack complexity (CVSS 9.1) makes it a priority patch for organizations running this payroll module.