Vulnerability in Oracle PeopleSoft Enterprise PeopleTools Cube Manager
CVE-2026-83015

7HIGH

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Peopletools
Vendor
CVE Published:
15 September 2026

What is CVE-2026-83015?

The vulnerability in Oracle's PeopleSoft Enterprise PeopleTools, specifically within the Cube Manager component, allows an attacker with low privileges who has logged into the infrastructure to exploit the system. The affected versions, ranging from 8.61 to 8.63, may be at risk of unauthorized access and potential takeover of the PeopleSoft platform. It is crucial for organizations using these versions to assess the risk and implement necessary security measures to safeguard their systems.

Affected Version(s)

PeopleSoft Enterprise PeopleTools 8.61 <= 8.63

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.