PeopleSoft Enterprise PeopleTools vulnerabilities

48 known vulnerabilities in PeopleSoft Enterprise PeopleTools from Oracle. 48 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  PeopleSoft Enterprise PeopleTools: Missing Authentication for Critical Functionality

  CVE-2026-101450Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT

• 7.6 High severity

  PeopleSoft Enterprise PeopleTools: Uncontrolled Resource Consumption

  CVE-2026-101434Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 8.7 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-101431Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

• 7.0 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-101429Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where

• 7.5 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-101428Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromi

• 8.1 High severity

  PeopleSoft Enterprise PeopleTools: Uncontrolled Resource Consumption

  CVE-2026-101427Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via H

• 8.1 High severity

  PeopleSoft Enterprise PeopleTools: Uncontrolled Resource Consumption

  CVE-2026-101422Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HT

• 7.5 High severity

  PeopleSoft Enterprise PeopleTools: Missing Authentication for Critical Functionality

  CVE-2026-101421Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis

• 9.6 Critical severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-101420Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise

• 7.5 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-101416Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communi

• 8.1 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-101411Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via

• 7.5 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-101410Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via H

• 7.5 High severity

  PeopleSoft Enterprise PeopleTools: Missing Authentication for Critical Functionality

  CVE-2026-101409Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via H

• 8.1 High severity

  PeopleSoft Enterprise PeopleTools: Missing Authentication for Critical Functionality

  CVE-2026-101390Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via

• 7.1 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-101388Oct 20, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comprom

• 7.7 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-87264Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTT

• 8.1 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-83019Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise

• 7.8 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-83018Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Peo

• 8.8 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-83017Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HT

• 7.2 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-83016Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where

• 7.0 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-83015Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructur

• 8.1 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-83014Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 8.5 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-82993Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTT

• 7.5 High severity

  PeopleSoft Enterprise PeopleTools: Uncontrolled Resource Consumption

  CVE-2026-73960Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 7.3 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-73955Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr

• 8.1 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-73954Sep 15, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via

• 7.5 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-60975Aug 18, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructur

• 8.8 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-60967Aug 18, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compr

• 7.0 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-60902Aug 18, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure wher

• 7.2 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-60883Aug 18, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PeopleCode). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to co

• 8.8 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-60879Aug 18, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Configuration Manager). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.2 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-60873Aug 18, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure

• 7.4 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-60856Aug 18, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Install and Packaging). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access v

• 8.1 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-60831Aug 18, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via

• 9.8 Critical severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-60821Aug 18, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT

• 8.1 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-60742Aug 18, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via

• 7.4 High severity

  PeopleSoft Enterprise PeopleTools: URL Redirection to Untrusted Site

  CVE-2026-47026Jul 21, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 8.7 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-47017Jul 21, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.1 High severity

  PeopleSoft Enterprise PeopleTools: URL Redirection to Untrusted Site

  CVE-2026-47015Jul 21, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). The supported version that is affected is 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 9.8 Critical severity

  Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Exploited

  CVE-2026-35273Jun 11, 2026OracleEPSS 96.7%

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with netwo