Vulnerability in Oracle PeopleSoft Enterprise CS - Research Tracking Component
CVE-2026-35241

5.7MEDIUM

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Cs Student Records
Vendor
CVE Published:
21 April 2026

What is CVE-2026-35241?

A vulnerability exists in the Oracle PeopleSoft Enterprise CS Student Records product, specifically within the Research Tracking component. This issue allows a low-privileged attacker with network access to exploit the system via HTTP. While successful exploitation demands human interaction from a third-party individual, it poses significant risks, including unauthorized access to sensitive data within PeopleSoft Enterprise CS Student Records. Attackers leveraging this vulnerability may gain complete access to critical information, highlighting the need for prompt remediation.

Affected Version(s)

PeopleSoft Enterprise CS Student Records 9.2

References

https://www.oracle.com/security-alerts/cpuapr2026.html
vendor-advisory

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.