Skip to content
ThreatCluster

Critical Vulnerability in Oracle PeopleSoft Enterprise Tools Disclosed

First seen 14 Nov 2026, 12:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 14, 2026 at 12:46 UTC
  • •CVE-2026-101431 affects Oracle PeopleSoft versions 8.61-8.63.
  • •The vulnerability allows low-privileged attackers to exploit the system via HTTP.
  • •Oracle has released a fix, and organizations are advised to update immediately.

A critical vulnerability (CVE-2026-101431) has been identified in Oracle PeopleSoft Enterprise PeopleTools, affecting versions 8.61 to 8.63. This flaw allows low-privileged attackers with network access to compromise the system via HTTP, requiring human interaction for successful exploitation. The vulnerability can lead to unauthorized access and modification of critical data. The CVSS score is 8.7, indicating high severity. Oracle has provided a fix for this vulnerability, and organizations are urged to apply it promptly. The NCSC has developed a machine-learning driven score to assess the relevance of this vulnerability for Dutch organizations. The vulnerability is linked to the Test Framework component of PeopleTools.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 4h ago How this analysis works

Timeline

2026-11-13
CVE-2026-101431 disclosed
Oracle disclosed a critical vulnerability in PeopleSoft Enterprise PeopleTools, affecting versions 8.61-8.63.
Vulnerabilities.Ncsc.Nl
2026-11-13
Patch released
Oracle released a patch for the vulnerability, urging users to apply it to mitigate risks.
Vulnerabilities.Ncsc.Nl

More articles in this cluster (7)

Extracted Entities (1)

1 / 2

Common questions

Which versions of PeopleSoft are affected?
The vulnerability affects Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63.
What is the severity of this vulnerability?
The CVSS score for this vulnerability is 8.7, indicating it is critical.
What should organizations do?
Organizations should apply the patch released by Oracle as soon as possible to mitigate the risk.