Unauthenticated Access Vulnerability in Oracle PeopleSoft Enterprise PeopleTools
CVE-2026-47026

7.4HIGH

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Peopletools
Vendor
CVE Published:
21 July 2026

What is CVE-2026-47026?

A vulnerability exists in the Oracle PeopleSoft Enterprise PeopleTools product, specifically in the OpenSearch Dashboards component, affecting the 8.61 and 8.62 versions. This issue allows an unauthenticated attacker with network access via HTTP to compromise the system. Although the vulnerability is contained within PeopleSoft Enterprise PeopleTools, successful exploitation can lead to significant ramifications across additional products. Notably, executing an attack requires human interaction, enabling unauthorized access to sensitive data and potentially complete access to all data available within PeopleSoft Enterprise PeopleTools.

Affected Version(s)

PeopleSoft Enterprise PeopleTools 8.61

PeopleSoft Enterprise PeopleTools 8.62

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.