Peoplesoft Enterprise Hcm Global Payroll Switzerland
Monthly
Full takeover of Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2 is possible via network-facing HTTP by an attacker who already holds high application privileges, per Oracle's July 2026 Critical Patch Update. Because the flaw carries a scope change, successful attacks can reach beyond the Global Payroll Switzerland component into additional PeopleSoft products, yielding full confidentiality, integrity, and availability loss. No public exploit identified at time of analysis, but the low attack complexity (CVSS 9.1) makes it a priority patch for organizations running this payroll module.
Cross-privilege data compromise in Oracle PeopleSoft Enterprise HCM Global Payroll for Switzerland 9.2 lets a low-privileged, network-based attacker read, alter, or delete critical payroll data and, because of a scope change, impact other integrated PeopleSoft products beyond the vulnerable module. The flaw is rated CVSS 3.1 8.2 (high) with confidentiality and integrity impact but no availability impact, and it is difficult to exploit (AC:H). No public exploit identified at time of analysis and it is not listed in CISA KEV; the fix is delivered through the Oracle July 2026 Critical Patch Update.
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Allocation of Resources Without Limits vulnerability could allow attackers to exhaust system resources through uncontrolled allocation.
Full takeover of Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2 is possible via network-facing HTTP by an attacker who already holds high application privileges, per Oracle's July 2026 Critical Patch Update. Because the flaw carries a scope change, successful attacks can reach beyond the Global Payroll Switzerland component into additional PeopleSoft products, yielding full confidentiality, integrity, and availability loss. No public exploit identified at time of analysis, but the low attack complexity (CVSS 9.1) makes it a priority patch for organizations running this payroll module.
Cross-privilege data compromise in Oracle PeopleSoft Enterprise HCM Global Payroll for Switzerland 9.2 lets a low-privileged, network-based attacker read, alter, or delete critical payroll data and, because of a scope change, impact other integrated PeopleSoft products beyond the vulnerable module. The flaw is rated CVSS 3.1 8.2 (high) with confidentiality and integrity impact but no availability impact, and it is difficult to exploit (AC:H). No public exploit identified at time of analysis and it is not listed in CISA KEV; the fix is delivered through the Oracle July 2026 Critical Patch Update.
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Allocation of Resources Without Limits vulnerability could allow attackers to exhaust system resources through uncontrolled allocation.