# CVE-2026-60614: Oracle PeopleSoft Enterprise CS Campus Community integrity and DoS vulnerability in Person Data

Source: https://junglewise.ai/threats/cve-2026-60614-oracle-peoplesoft-enterprise-cs-campus-community-integrity-and  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-21. Updated: 2026-07-22  
License: CC BY 4.0 with a link back

CVE-2026-60614 · Severity: high · CVSS 7.1 · Published 2026-07-21

Oracle PeopleSoft Enterprise CS Campus Community, a platform used by educational institutions to manage student and staff data, contains a vulnerability in its Person Data component. An attacker with basic user credentials could exploit this flaw to modify or delete critical records, access sensitive information, or cause a total system outage. While the attack is difficult to execute, a successful breach could significantly disrupt campus operations and compromise the integrity of institutional data.

Technologies: [Oracle PeopleSoft Enterprise CS Campus Community](https://junglewise.ai/threats/technologies/peoplesoft-enterprise-cs-campus-community). Vendors: [Oracle](https://junglewise.ai/threats/vendors/oracle).

## Quick answers

**Is CVE-2026-60614 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-60614 being exploited in the wild.

**How severe is CVE-2026-60614?** High severity, with a CVSS score of 7.1, published 21 July 2026.

**Which products and versions are affected?** Oracle PeopleSoft Enterprise CS Campus Community 9.2.38.

**Is there a fix for CVE-2026-60614?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-60614 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-60614?** Check whether you run Oracle PeopleSoft Enterprise CS Campus Community at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability exists in the Person Data component of Oracle PeopleSoft Enterprise CS Campus Community (version 9.2.38). The flaw is exploitable by a low-privileged attacker with network access via HTTP, though Oracle notes the attack complexity is high. Successful exploitation allows for unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to a subset of system data. Additionally, the vulnerability can be leveraged to cause a hang or repeatable crash, resulting in a complete denial of service (DoS). The issue was addressed in the Oracle Critical Patch Update for July 2026.

## Affected products

- Oracle PeopleSoft Enterprise CS Campus Community 9.2.38

## Timeline

- 2026-07-21: advisory: Oracle published the July 2026 Critical Patch Update containing this fix.
- 2026-07-21: disclosed: CVE-2026-60614 was publicly released.

## References

- [https://www.oracle.com/security-alerts/cpujul2026.html](https://www.oracle.com/security-alerts/cpujul2026.html)

## Related threats

- [Oracle PeopleSoft Enterprise CS Campus Community security bypass](https://junglewise.ai/threats/cve-2026-61103-oracle-peoplesoft-enterprise-cs-campus-community-security-bypass)
- [Oracle PeopleSoft Enterprise CS Campus Community security bypass in Security component](https://junglewise.ai/threats/cve-2026-60617-oracle-peoplesoft-enterprise-cs-campus-community-security-bypass)
- [Oracle PeopleSoft Enterprise CS Campus Community security bypass](https://junglewise.ai/threats/cve-2026-60616-oracle-peoplesoft-enterprise-cs-campus-community-security-bypass)
- [Oracle PeopleSoft Enterprise CS Campus Community security bypass in Security component](https://junglewise.ai/threats/cve-2026-60615-oracle-peoplesoft-enterprise-cs-campus-community-security-bypass)
- [Oracle PeopleSoft Enterprise CS Campus Community information disclosure](https://junglewise.ai/threats/cve-2026-60611-oracle-peoplesoft-enterprise-cs-campus-community-information)