SB20261107310 - Improper input validation in PeopleSoft Enterprise HCM Global Payroll Mexico
Published: November 7, 2026
Security Bulletin ID
SB20261107310
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Improper input validation (CVE-ID: CVE-2026-60669)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote authenticated user to modify data and cause limited service disruption.
The vulnerability exists due to improper input validation within the Global Payroll for Mexico component in PeopleSoft Enterprise HCM Global Payroll Mexico. A remote authenticated user can exploit this vulnerability to modify data and cause limited service disruption.
Remediation
Install update from vendor's website.