Security Flaw in Oracle PeopleSoft Enterprise PeopleTools
CVE-2026-87342

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Peopletools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-87342?

A security vulnerability has been identified in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, specifically affecting versions 8.61 to 8.63. This flaw presents a scenario where an unauthenticated attacker with network access via HTTP can exploit the system, potentially gaining unauthorized access to sensitive data. Successful exploitation may allow for unauthorized updates, inserts, or deletions of the data accessible within PeopleSoft Enterprise PeopleTools, posing significant risks to data confidentiality and integrity.

Affected Version(s)

PeopleSoft Enterprise PeopleTools 8.61 <= 8.63

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.