CVE-2026-101434
HighCVSS 7.6Summary
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Database Server) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can exploit it with user interaction, causing hang or crash and data modification.
Risk Assessment
Potential denial of service and unauthorized data modification and read, impacting availability, integrity, and confidentiality.
Recommendation
Update PeopleSoft Enterprise PeopleTools to the latest version and restrict network access to necessary addresses.
Other vulnerabilities in Oracle PeopleSoft Enterprise PeopleTools
See all- CVE-2026-101450High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Integration Broker) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can exploit it with user interaction.
- CVE-2026-101431High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Test Framework) affects versions 8.61-8.63. A low-privileged attacker with network access via HTTP can exploit it with user interaction, potentially impacting additional products.
- CVE-2026-101429High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. An unauthenticated attacker with logon to the infrastructure can exploit it with user interaction, potentially leading to takeover.
- CVE-2026-101428High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. A low-privileged attacker with network access via HTTP can exploit it, potentially leading to takeover.
- CVE-2026-101427High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Report Distribution) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can exploit it with user interaction, causing data modification and denial of service.
- CVE-2026-101422High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Report Distribution component, affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized creation, deletion or modification of critical data and causing hang or repeatable crashes (complete DOS).
- CVE-2026-101421High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, SQR component, affecting versions 8.61-8.63. Easily exploitable by an unauthenticated attacker with HTTP network access, allowing unauthorized access to critical data or complete access to all data accessible in PeopleTools.
- CVE-2026-101416High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, PsAdmin component, affecting versions 8.61-8.63. Difficult to exploit, requires access to the physical communication segment attached to the hardware running PeopleTools; an unauthenticated attacker can take over the system.
- CVE-2026-101411High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Business Interlink component, affecting versions 8.61-8.63. Difficult to exploit, an unauthenticated attacker with HTTP network access can take over PeopleTools.
- CVE-2026-101410High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Business Interlink component, affecting versions 8.61-8.63. Difficult to exploit, a low-privileged attacker with HTTP network access can take over PeopleTools.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools as well as unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data and unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS