Security Vulnerability in Oracle PeopleSoft Enterprise PeopleTools

CVE-2026-34309

What is CVE-2026-34309?

An improper access control vulnerability has been identified in Oracle's PeopleSoft Enterprise PeopleTools, specifically concerning its security component. This weakness allows a low-privileged attacker, with network access via HTTP, to exploit the system. If exploited, an attacker could potentially create, delete, or modify critical data across all accessible instances of PeopleSoft Enterprise PeopleTools. Successful exploitation may result in unauthorized access to sensitive information, impacting both confidentiality and integrity of the data. Organizations using affected versions 8.61 and 8.62 are advised to implement the necessary security patches promptly to mitigate risks.

References