Unauthenticated Vulnerability in Oracle PeopleSoft Enterprise PeopleTools
CVE-2026-87410

6.8MEDIUM

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Peopletools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-87410?

A vulnerability exists within Oracle PeopleSoft Enterprise PeopleTools, specifically in the Report Distribution component. This weakness allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. While the vulnerability is confined to PeopleSoft Enterprise PeopleTools, its implications may extend to other products, increasing the risks associated with an attack. Successful exploitation can lead to unauthorized access to sensitive data or complete exposure of all accessible PeopleSoft Enterprise PeopleTools data, raising significant security concerns for users.

Affected Version(s)

PeopleSoft Enterprise PeopleTools 8.61 <= 8.63

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.