CVE-2026-83070
HighCVSS 7.7Summary
Vulnerability in Oracle's PeopleSoft Enterprise PRTL Interaction Hub (component: Enterprise Portal) affects version 9.1. A low-privileged attacker can exploit it over HTTP, leading to unauthorized access to critical data or all accessible data. Attacks may also impact additional products (scope change).
Risk Assessment
The risk involves potential unauthorized access to sensitive data, compromising confidentiality. Since attacks can affect other products, the potential impact is broader.
Recommendation
Apply Oracle's patches for version 9.1 immediately and restrict network access to trusted users only.
Other vulnerabilities in PeopleSoft Enterprise PRTL Interaction Hub
See all- CVE-2017-10354High
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal) allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction, potentially leading to unauthorized access to critical data.
- CVE-2017-10338High
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal) allows unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft (component: Enterprise Portal). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. While the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).