SB20261107309 - Improper input validation in PeopleSoft Enterprise FIN General Ledger Argentina
Published: November 7, 2026
Security Bulletin ID
SB20261107309
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Improper input validation (CVE-ID: CVE-2026-61069)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote authenticated user to modify data and cause limited service disruption.
The vulnerability exists due to improper input validation within the General Ledger component in PeopleSoft Enterprise FIN General Ledger Argentina. A remote authenticated user can exploit this vulnerability to modify data and cause limited service disruption.
Remediation
Install update from vendor's website.