{
  "cve": "CVE-2026-70861",
  "enrichment": {
    "affected": [
      {
        "configurations": [
          {
            "platform": null,
            "status": "affected",
            "versions": {
              "scheme": "generic",
              "value": "9.1"
            }
          }
        ],
        "enrichment": {
          "confidence": 95.0,
          "confidence_source": "inferred",
          "scores": [
            {
              "score": 95.0,
              "source": "inferred"
            },
            {
              "score": 100.0,
              "source": "matching"
            }
          ]
        },
        "original": {
          "product": "PeopleSoft Enterprise FIN Common Objects Brazil",
          "source": "cna",
          "vendor": "Oracle Corporation"
        },
        "product": "peoplesoft_enterprise_fin_common_objects_brazil",
        "vendor": "oracle"
      }
    ],
    "created": "2026-08-19T03:30:17.256402+00:00",
    "title": "Privilege Escalation via T3/IIOP in Oracle PeopleSoft FIN Common Objects Brazil 9.1",
    "updated": "2026-08-21T07:00:12.047398+00:00",
    "vendors": [
      "oracle",
      "oracle$PRODUCT$peoplesoft_enterprise_fin_common_objects_brazil"
    ]
  },
  "epss": {
    "score": 0.00462
  },
  "mitre": {
    "cpes": [
      "cpe:2.3:a:oracle:peoplesoft_enterprise_fin_common_objects_brazil:9.1:*:*:*:*:*:*:*"
    ],
    "created": "2026-08-18T21:02:12.762000+00:00",
    "description": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft Enterprise FIN Common Objects Brazil.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 7.2,
        "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
      },
      "cvssV4_0": {}
    },
    "mitre_repo_path": "cves/2026/70xxx/CVE-2026-70861.json",
    "references": [
      "https://www.oracle.com/security-alerts/cspuaug2026.html"
    ],
    "title": null,
    "updated": "2026-08-21T03:56:23.385000+00:00",
    "vendors": [
      "oracle",
      "oracle$PRODUCT$peoplesoft_enterprise_fin_common_objects_brazil"
    ],
    "weaknesses": []
  },
  "nvd": {
    "cpes": [],
    "created": "2026-08-18T21:17:42.243000+00:00",
    "description": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft Enterprise FIN Common Objects Brazil.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 7.2,
        "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
      },
      "cvssV4_0": {}
    },
    "nvd_repo_path": "2026/CVE-2026-70861.json",
    "references": [
      "https://www.oracle.com/security-alerts/cspuaug2026.html"
    ],
    "title": null,
    "updated": "2026-08-21T04:18:14.967000+00:00",
    "vendors": [],
    "weaknesses": [
      "CWE-284",
      "CWE-306"
    ]
  },
  "opencve": {
    "changes": [
      {
        "created": "2026-08-18T21:15:00+00:00",
        "data": [
          {
            "details": {
              "new": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft Enterprise FIN Common Objects Brazil.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).",
              "old": null
            },
            "type": "description"
          },
          {
            "details": [
              "oracle",
              "oracle$PRODUCT$peoplesoft_enterprise_fin_common_objects_brazil"
            ],
            "type": "first_time"
          },
          {
            "details": {
              "added": [
                "cpe:2.3:a:oracle:peoplesoft_enterprise_fin_common_objects_brazil:9.1:*:*:*:*:*:*:*"
              ],
              "removed": []
            },
            "type": "cpes"
          },
          {
            "details": {
              "added": [
                "oracle",
                "oracle$PRODUCT$peoplesoft_enterprise_fin_common_objects_brazil"
              ],
              "removed": []
            },
            "type": "vendors"
          },
          {
            "details": {
              "added": [
                "https://www.oracle.com/security-alerts/cspuaug2026.html"
              ],
              "removed": []
            },
            "type": "references"
          },
          {
            "details": {
              "added": {
                "cvssV3_1": {
                  "score": 7.2,
                  "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
                }
              },
              "removed": {},
              "updated": {}
            },
            "type": "metrics"
          }
        ],
        "id": "1e370d84-f547-4f2a-b8c8-fb6c5a56fa7b"
      },
      {
        "created": "2026-08-19T03:45:00+00:00",
        "data": [
          {
            "details": {
              "new": "Privilege Escalation Leading to Full Compromise via Network Access in Oracle PeopleSoft Enterprise FIN Common Objects Brazil",
              "old": null
            },
            "type": "title"
          },
          {
            "details": {
              "added": [
                "CWE-269",
                "CWE-284"
              ],
              "removed": []
            },
            "type": "weaknesses"
          }
        ],
        "id": "0c567b26-4991-4a73-bde9-2b680da6b9a6"
      },
      {
        "created": "2026-08-20T18:30:00+00:00",
        "data": [
          {
            "details": {
              "added": [
                "CWE-306"
              ],
              "removed": []
            },
            "type": "weaknesses"
          }
        ],
        "id": "02da48ba-2c58-4960-8239-8cd5fd604fe9"
      },
      {
        "created": "2026-08-20T19:30:00+00:00",
        "data": [
          {
            "details": {
              "added": {
                "ssvc": {
                  "options": {
                    "Automatable": "no",
                    "Exploitation": "none",
                    "Technical Impact": "total"
                  },
                  "version": "2.0.3"
                }
              },
              "removed": {},
              "updated": {}
            },
            "type": "metrics"
          }
        ],
        "id": "f6fcd544-b6b1-437e-89f5-78d6dce11212"
      },
      {
        "created": "2026-08-21T05:15:00+00:00",
        "data": [
          {
            "details": {
              "new": null,
              "old": "Privilege Escalation Leading to Full Compromise via Network Access in Oracle PeopleSoft Enterprise FIN Common Objects Brazil"
            },
            "type": "title"
          },
          {
            "details": {
              "added": [],
              "removed": [
                "CWE-269"
              ]
            },
            "type": "weaknesses"
          }
        ],
        "id": "84cb2373-ef54-4c23-8490-ab1874350302"
      },
      {
        "created": "2026-08-21T07:15:00+00:00",
        "data": [
          {
            "details": {
              "new": "Privilege Escalation via T3/IIOP in Oracle PeopleSoft FIN Common Objects Brazil 9.1",
              "old": null
            },
            "type": "title"
          }
        ],
        "id": "0ba0a716-e415-44f5-a38f-813ce4c174e0"
      }
    ],
    "cpes": {
      "data": [
        "cpe:2.3:a:oracle:peoplesoft_enterprise_fin_common_objects_brazil:9.1:*:*:*:*:*:*:*"
      ],
      "providers": [
        "mitre"
      ]
    },
    "created": {
      "data": "2026-08-18T21:02:12.762000+00:00",
      "provider": "mitre"
    },
    "description": {
      "data": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft Enterprise FIN Common Objects Brazil.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).",
      "provider": "mitre"
    },
    "metrics": {
      "cvssV2_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_1": {
        "data": {
          "score": 7.2,
          "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
        },
        "provider": "mitre"
      },
      "cvssV4_0": {
        "data": {},
        "provider": null
      },
      "epss": {
        "data": {
          "score": 0.00462
        },
        "provider": "first"
      },
      "kev": {
        "data": {},
        "provider": null
      },
      "ssvc": {
        "data": {
          "options": {
            "Automatable": "no",
            "Exploitation": "none",
            "Technical Impact": "total"
          },
          "version": "2.0.3"
        },
        "provider": "vulnrichment"
      },
      "threat_severity": {
        "data": null,
        "provider": null
      }
    },
    "references": {
      "data": [
        "https://www.oracle.com/security-alerts/cspuaug2026.html"
      ],
      "providers": [
        "mitre",
        "nvd"
      ]
    },
    "title": {
      "data": "Privilege Escalation via T3/IIOP in Oracle PeopleSoft FIN Common Objects Brazil 9.1",
      "provider": "enrichment"
    },
    "updated": {
      "data": "2026-08-21T07:00:12.047398+00:00",
      "provider": "enrichment"
    },
    "vendors": {
      "data": [
        "oracle",
        "oracle$PRODUCT$peoplesoft_enterprise_fin_common_objects_brazil"
      ],
      "providers": [
        "mitre",
        "enrichment"
      ]
    },
    "weaknesses": {
      "data": [
        "CWE-284",
        "CWE-306"
      ],
      "providers": [
        "nvd",
        "vulnrichment"
      ]
    }
  },
  "vulnrichment": {
    "cpes": [],
    "created": "2026-08-18T21:02:12.762000+00:00",
    "description": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft Enterprise FIN Common Objects Brazil.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {},
      "cvssV4_0": {},
      "kev": {},
      "ssvc": {
        "options": {
          "Automatable": "no",
          "Exploitation": "none",
          "Technical Impact": "total"
        },
        "version": "2.0.3"
      }
    },
    "references": [],
    "title": null,
    "updated": "2026-08-20T17:55:20.801000+00:00",
    "vendors": [],
    "vulnrichment_repo_path": "2026/70xxx/CVE-2026-70861.json",
    "weaknesses": [
      "CWE-284",
      "CWE-306"
    ]
  }
}