Vulnerability in Oracle PeopleSoft Enterprise PeopleTools Affecting Workflow Component

CVE-2026-34307

What is CVE-2026-34307?

The vulnerability in Oracle's PeopleSoft Enterprise PeopleTools, specifically within the Workflow component, allows attackers with low privileges to exploit the system through HTTP network access. This exploitation requires human interaction from an individual who is not the attacker. While the primary focus is on the PeopleTools application, successful exploitation can have severe repercussions on associated products. Attackers may gain unauthorized access, permitting them to update, insert, or delete critical data within the affected systems, leading to significant confidentiality and integrity concerns for data accessible via PeopleSoft. For further information, refer to the official security advisory.

References