Vulnerability in PeopleSoft Enterprise HCM by Oracle Affecting Administer Workforce
CVE-2026-83375

6MEDIUM

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Hcm Human Resources
Vendor
CVE Published:
20 October 2026

What is CVE-2026-83375?

A vulnerability in Oracle's PeopleSoft Enterprise HCM Human Resources product, specifically within the Administer Workforce component, poses a significant security risk. It allows a high-privileged attacker with network access through HTTP to potentially compromise the system. Exploitation of this vulnerability requires user interaction, making it more challenging to execute. However, successful exploitation could lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to some data. Additionally, it may allow the attacker to cause system instability, leading to crashes or denial of service for the PeopleSoft Enterprise HCM Human Resources environment.

Affected Version(s)

PeopleSoft Enterprise HCM Human Resources 9.2

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.