Vulnerability in PeopleSoft Enterprise CC Common Application Objects by Oracle
CVE-2026-91331

3.8LOW

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Cc Common Application Objects
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91331?

A vulnerability exists in the PeopleSoft Enterprise CC Common Application Objects product of Oracle that allows a high-privileged attacker with network access via HTTP to gain unauthorized access. Successful exploitation can lead to potential unauthorized updates, inserts, or deletions of data within PeopleSoft's Common Application Objects. Additionally, sensitive data subsets may be exposed, compromising the overall integrity and confidentiality of the application. Organizations using PeopleSoft Enterprise version 9.2 should evaluate their exposure and implement recommended security measures.

Affected Version(s)

PeopleSoft Enterprise CC Common Application Objects 9.2

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
3.8
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.