CVE-2026-87348

The record

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 4.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).

Affected packages

Related vulnerabilities

• CVE-2026-61730 SOCFortress CoPilot focuses on providing a single pane of glass for all your security… CWE-552
• CVE-2026-119201 Nuxt is an open-source web development framework for Vue.js. CWE-552
• CVE-2026-67073 HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control… CWE-552
• CVE-2026-65210 This issue may allow an authenticated IPMI Administrator to read arbitrary files from the… CWE-552
• CVE-2026-46651 The Goobi viewer is a web application that allows digitised material to be displayed in a… CWE-552
• CVE-2026-114400 Trudesk through 1.2.11 contains a missing authentication vulnerability that allows… CWE-552
• CVE-2026-85840 Files or directories accessible to external parties in Windows Event Viewer allows an… CWE-552
• CVE-2026-21589 This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service… CWE-552