Vulnerability in Oracle PeopleSoft Enterprise PeopleTools Affecting Network Security
CVE-2026-47024

5.4MEDIUM

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Peopletools
Vendor
CVE Published:
21 July 2026

What is CVE-2026-47024?

The vulnerability in Oracle's PeopleSoft Enterprise PeopleTools impacts version 8.62, allowing low-privileged attackers to exploit the system via HTTP. It requires human interaction to execute successfully but can lead to severe data breaches. Attackers may gain unauthorized access to modify or access sensitive data within PeopleSoft, highlighting the need for immediate security measures. Organizations using this software should assess their exposure and implement protective actions to safeguard their systems.

Affected Version(s)

PeopleSoft Enterprise PeopleTools 8.62

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.