Security Vulnerability in Oracle PeopleSoft Enterprise PeopleTools

CVE-2026-47051

What is CVE-2026-47051?

A security vulnerability exists in Oracle's PeopleSoft Enterprise PeopleTools, specifically in its Security component. This vulnerability allows a low-privileged attacker with HTTP network access to compromise the integrity of PeopleSoft Enterprise PeopleTools. Successful exploitation requires user interaction from someone other than the attacker, which could lead to unauthorized modifications to accessible data, including the ability to update, insert, or delete records. Furthermore, there is potential for unauthorized read access to certain datasets within PeopleSoft Enterprise PeopleTools. The vulnerabilities in PeopleTools may also have implications for other related products, expanding the potential scope of impact.

References