Vulnerability in PeopleSoft Enterprise PeopleTools by Oracle
CVE-2026-87345

6.1MEDIUM

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Peopletools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-87345?

A critical vulnerability exists within the Oracle PeopleSoft Enterprise PeopleTools, specifically in the Business Interlink component, allowing unauthenticated attackers with HTTP network access to compromise system security. This vulnerability can lead to unauthorized updates, inserts, or deletions of accessible data within PeopleSoft, as well as unauthorized read access to certain data. Successful exploitation requires interaction from a user other than the attacker, emphasizing the need for prompt patching and enhanced access controls. The potential for this vulnerability to affect interconnected systems calls for urgent remediation strategies.

Affected Version(s)

PeopleSoft Enterprise PeopleTools 8.61 <= 8.63

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.