Vulnerability in PeopleTools Affects Oracle's PeopleSoft Products

CVE-2026-87353

What is CVE-2026-87353?

A vulnerability exists in Oracle's PeopleSoft Enterprise PeopleTools that allows an unauthenticated attacker with access to the underlying infrastructure to compromise the application. Exploiting this vulnerability requires human interaction from a third party. Successful exploitation may permit unauthorized updates, insertions, or deletions of accessible data, alongside unauthorized read access to a subset of that data. Additionally, it poses a risk of causing a partial denial of service (partial DoS) of the PeopleTools system.

References