Vulnerability in Oracle PeopleSoft Enterprise PeopleTools Security Component
CVE-2026-87350

4.5MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-87350?

A security vulnerability exists in the PeopleSoft Enterprise PeopleTools product, particularly within its security component. This flaw affects versions 8.61 through 8.63 and may allow an attacker with low privileges to compromise the software environment where PeopleSoft is executed. Through exploiting this vulnerability, attackers could potentially gain unauthorized access, including the ability to update, insert, or delete data, and could lead to unauthorized read access to specific datasets. Furthermore, it may result in a partial denial of service, affecting the availability of PeopleSoft Enterprise PeopleTools.

Affected Version(s)

PeopleSoft Enterprise PeopleTools 8.61 <= 8.63

References

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.