NCSC-2026-0439
Vulnerability from csaf_ncscnl - Published: 2026-10-21 09:04 - Updated: 2026-10-21 09:04Multiple vulnerabilities in Oracle Database Server, Java SE, GraalVM, PeopleSoft Enterprise PeopleTools, and NetApp products using Oracle Java SE libraries allow unauthenticated attackers with network access and sometimes human interaction to cause denial-of-service or unauthorized data modifications.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / PeopleSoft Enterprise PeopleTools
|
vers:unknown/* |
Multiple OpenSSL vulnerabilities including heap buffer overflows, out-of-bounds reads, NULL pointer dereferences, use-after-free bugs, and cryptographic flaws affect various versions and products, potentially leading to denial of service or information disclosure without requiring password knowledge.
Eclipse Parsson versions before 1.1.8 and several Oracle products using it have a denial of service vulnerability due to lack of JSON size limits, allowing remote attackers to exhaust CPU and memory resources.
Bouncy Castle Java versions before 1.85 and LTS before 2.73.12 have a length-dependent KDF split vulnerability enabling IESEngine stream-mode MAC forgery, affecting Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 with a CVSS score of 5.3 allowing unauthorized HTTPS data modification.
Logstash suffers from a path traversal vulnerability enabling arbitrary file writes and potential remote code execution with pipeline auto-reloading, while Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 has a critical HTTP flaw allowing full system compromise with a CVSS of 9.8.
Libssh2 versions through 1.11.1 contain multiple vulnerabilities including an out-of-bounds write in ssh2_transport_read() that enables remote code execution via crafted SSH packets, affecting various Linux distributions and Oracle PeopleSoft PeopleTools.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Web Server versions 8.61 to 8.63 allows unauthenticated network attackers to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 5.8.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Weblogic component versions 8.61-8.63 allows unauthenticated network attackers via TLS to gain unauthorized access or modify critical data, with a CVSS 3.1 score of 6.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a high-privileged attacker with infrastructure logon to access critical or all accessible PeopleSoft data, with a CVSS 3.1 base score of 4.4 indicating confidentiality impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with network access to read and modify accessible data, with a CVSS 3.1 base score of 4.2 indicating low to moderate impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a high-privileged attacker with infrastructure logon to perform unauthorized data modifications, read access, and partial denial of service, rated CVSS 3.9.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with SSH access to potentially modify data, with a CVSS 3.1 base score of 3.7 indicating low integrity impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Query (versions 8.61 and 8.62) allows a high-privileged attacker with network access to cause denial of service and unauthorized data read/write, with a CVSS 3.1 score of 5.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows low-privileged attackers with HTTP access to modify or delete critical data and cause application crashes, rated CVSS 3.1 base score 6.8.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 and 8.62 allows a low-privileged network attacker to gain unauthorized read access to data and cause a partial denial of service, with a CVSS 3.1 base score of 4.2.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.62 Search Framework allows unauthenticated attackers with network access and user interaction to gain unauthorized read and write access to certain data, rated CVSS 3.1 base score 4.2.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Process Scheduler versions 8.61 and 8.62 allows a low-privileged attacker with network access and user interaction to gain unauthorized read and write access to data, with a CVSS 3.1 score of 4.4.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows a high-privileged attacker with HTTP network access to gain unauthorized data access or cause denial of service, with a CVSS 3.1 score of 6.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Search Framework versions 8.61 and 8.62 allows unauthenticated attackers with physical access to the communication segment to potentially access critical or all accessible data, rated CVSS 3.1 base score 5.3.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Push Notifications (versions 8.61 and 8.62) allows a high-privileged attacker with network access to fully compromise the system, with a CVSS 3.1 base score of 6.8.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Data Mover (versions 8.61-8.63) enables a high-privileged attacker with infrastructure access and user interaction to perform unauthorized data modifications, read access, and partial denial of service, rated CVSS 3.8.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62 allows a high-privileged attacker with infrastructure logon to gain unauthorized read access to certain data, with limited confidentiality impact and a CVSS score of 1.9.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows a high-privileged attacker with infrastructure access to cause data modification, deletion, or denial of service, rated CVSS 6.0.
A vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina 9.1 allows a low-privileged attacker with HTTP network access to create, delete, or modify critical data and gain unauthorized read access, with a CVSS 3.1 score of 5.9.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Integration Broker (versions 8.61-8.63) allows unauthenticated attackers with network access and user interaction to gain unauthorized read and write access, with a CVSS 3.1 score of 4.7.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with network access and user interaction to gain unauthorized read and write access to data, with a CVSS 3.1 base score of 5.4.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with network access and user interaction to gain unauthorized read access, with a CVSS 3.1 base score of 3.0.
A vulnerability in Oracle PeopleSoft Enterprise HCM Human Resources 9.2 allows a high-privileged attacker with network access and user interaction to manipulate critical data, read unauthorized data, or cause denial of service, rated CVSS 6.0.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Multichannel Framework versions 8.61-8.63 allows a high-privileged attacker with HTTP network access to potentially compromise system confidentiality, integrity, and availability, rated CVSS 3.1 score 6.6.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with network access to potentially gain unauthorized access to critical or all accessible data, with a CVSS 3.1 base score of 5.3.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows unauthenticated network attackers to perform unauthorized data modifications, with a CVSS 3.1 base score of 3.7 indicating low integrity impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with HTTP network access to potentially gain unauthorized access or modify critical data, rated with a CVSS 3.1 base score of 6.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows unauthenticated network attackers to perform unauthorized read and write operations, with a CVSS 3.1 base score of 4.8 indicating moderate confidentiality and integrity impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63) LDAP component allows unauthenticated network attackers via HTTP to perform unauthorized read and write operations, with a CVSS 3.1 base score of 6.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows unauthenticated attackers with HTTP network access to perform unauthorized read and write operations, with a CVSS 3.1 base score of 6.1.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a high-privileged attacker with infrastructure access to modify data, read sensitive information, and cause partial denial of service, rated CVSS 3.1 base score 4.2.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63 allows a high-privileged attacker with system access and user interaction to potentially compromise the PeopleSoft environment, with a CVSS 3.1 base score of 6.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows low-privileged attackers with logon access to perform unauthorized data modifications, read sensitive data, and cause partial denial of service, rated CVSS 4.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows low-privileged users with logon access to perform unauthorized read and write operations, with a CVSS 3.1 base score of 4.4 indicating moderate confidentiality and integrity impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows unauthenticated attackers with infrastructure logon and user interaction to read, update, delete data, and cause partial denial of service, rated CVSS 4.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with network access and user interaction to gain unauthorized read and write access to certain data, with a CVSS 3.1 base score of 4.4.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools XML Publisher (versions 8.61-8.63) allows low-privileged users with logon access to read unauthorized data, with a CVSS 3.1 base score of 3.3 indicating limited confidentiality impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools nVision component versions 8.61-8.63 allows low-privileged attackers with HTTP network access to gain unauthorized access to critical or all accessible data, rated CVSS 6.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows unauthenticated attackers with HTTP network access to gain unauthorized access to critical or all accessible data, rated CVSS 3.1 base score 6.8.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows a high-privileged attacker with HTTP network access to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 2.7.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows unauthenticated network attackers to potentially access critical data, with a CVSS 3.1 base score of 5.3 and requiring user interaction.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows unauthenticated network attackers to gain unauthorized read access to data, with a CVSS 3.1 base score of 3.7 indicating low confidentiality impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63 allows low-privileged authenticated users to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 2.5 indicating limited confidentiality impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows low-privileged network attackers to perform unauthorized read and write operations, with a CVSS 3.1 base score of 4.9 indicating moderate confidentiality and integrity impact.
A vulnerability in Oracle PeopleSoft Enterprise SCM Manufacturing 9.2 allows unauthenticated network attackers via HTTP to perform unauthorized data modifications, with a CVSS 3.1 base score of 3.7 indicating low to moderate integrity impact.
A vulnerability in Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 allows a high-privileged attacker with HTTP network access to perform unauthorized read and write operations, with a CVSS 3.1 score of 3.8 indicating low to moderate impact.
A vulnerability in Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2 allows a high-privileged attacker with infrastructure access to perform unauthorized data modifications, read access, and partial denial of service, rated CVSS 4.2.
A critical vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina 9.1 allows unauthenticated network attackers via Oracle Net to access sensitive data, rated with a CVSS 3.1 base score of 7.5.
A vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina 9.1 allows a high-privileged attacker with network access and user interaction to manipulate critical data, access all accessible data, and cause partial denial of service, scoring 6.4 on CVSS 3.1.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated remote attackers to modify data and cause partial denial of service via HTTP, with a CVSS 3.1 base score of 6.5.
A vulnerability in Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 allows unauthenticated network attackers via HTTP to perform unauthorized data modifications, with a CVSS 3.1 base score of 3.7 indicating low to moderate integrity impact.
A vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 allows a high-privileged attacker with network access to create, delete, or modify critical data, with a CVSS 3.1 score of 6.1 indicating significant confidentiality and integrity impact.
A vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 allows unauthenticated network attackers to gain unauthorized read access to data, with a CVSS 3.1 base score of 5.3 indicating moderate confidentiality impact.
A critical vulnerability in Oracle PeopleSoft Enterprise SCM Strategic Sourcing 9.2 allows a low-privileged attacker with HTTP network access to fully compromise the system, with a CVSS 3.1 base score of 8.8 indicating high severity.
A vulnerability in Oracle PeopleSoft Enterprise SCM Strategic Sourcing 9.2 allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical data, rated with a CVSS 3.1 base score of 6.5.
A vulnerability in Oracle PeopleSoft Enterprise SCM Purchasing 9.2 allows a low-privileged attacker with network access and user interaction to gain unauthorized read/write access to certain data, with a CVSS 3.1 score of 5.4.
A vulnerability in Oracle PeopleSoft Enterprise SCM Strategic Sourcing 9.2 allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical data, with a CVSS 3.1 base score of 6.5 indicating significant confidentiality impact.
A vulnerability in Oracle PeopleSoft Enterprise FIN Cash Management 9.2 allows a high-privileged attacker with infrastructure access and user interaction to perform unauthorized data modifications, read access, and partial denial of service, rated CVSS 3.8.
A vulnerability in Oracle PeopleSoft Enterprise FIN General Ledger Brazil 9.1 allows low-privileged attackers with logon access to perform unauthorized data modifications and partial denial of service, with a CVSS 3.1 score of 4.4 affecting integrity and availability.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows unauthenticated attackers with HTTP network access to perform unauthorized data modification operations, with a CVSS 3.1 base score of 5.3 indicating integrity impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62 allows a high-privileged attacker with infrastructure access to manipulate critical data, rated with a CVSS 3.1 base score of 6.0.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical or all accessible data, rated CVSS 6.5.
A vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 allows unauthenticated network attackers to perform unauthorized data modifications and cause partial denial of service, with a CVSS 3.1 base score of 6.5.
A vulnerability in Oracle PeopleSoft Enterprise FIN Product Configurator Brazil 9.1 allows low-privileged attackers with infrastructure access to perform unauthorized data modifications and cause partial denial of service, rated CVSS 4.4.
A vulnerability in Oracle PeopleSoft Enterprise FIN Manufacturing Brazil 9.1 allows low-privileged attackers with infrastructure access to modify data unauthorizedly and cause partial denial of service, rated CVSS 3.1 score 4.4.
A vulnerability in Oracle PeopleSoft Enterprise FIN Inventory Brazil 9.1 allows low-privileged attackers with infrastructure access to modify data unauthorizedly and cause partial denial of service, rated CVSS 3.1 score 4.4.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with network access to gain unauthorized access to critical data or cause partial denial of service, rated CVSS 3.1 base score 7.1.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated network attackers to cause denial of service by hanging or crashing the system, with a CVSS 3.1 base score of 5.9.
A high-severity vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated remote attackers to potentially compromise system confidentiality, integrity, and availability via HTTP access.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a high-privileged attacker with HTTP network access to gain unauthorized access to critical data or cause partial denial of service, rated CVSS 3.1 score 5.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution versions 8.61 to 8.63 allows unauthenticated remote attackers to access critical or all accessible data via HTTP, with a CVSS 3.1 base score of 7.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with HTTP network access to potentially compromise system confidentiality, integrity, and availability, with a CVSS 3.1 base score of 7.5.
A high-severity vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated remote attackers to potentially compromise system confidentiality, integrity, and availability via HTTP access.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows low-privileged attackers with logon access to modify critical data, read unauthorized data, and cause partial denial of service, rated CVSS 5.8.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with network access to cause a denial of service by hanging or crashing the system, with a CVSS 3.1 base score of 5.3.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows an unauthenticated attacker with infrastructure logon to perform unauthorized data modifications, with a CVSS 3.1 base score of 2.9 indicating low integrity impact.
A low-severity vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with network access to cause a partial denial of service, rated CVSS 3.1.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows an unauthenticated attacker with physical access to the communication segment to potentially compromise system confidentiality, integrity, and availability, with a CVSS 3.1 score of 7.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with HTTP network access to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 3.7 indicating low confidentiality impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical or all accessible data, rated CVSS 6.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical or all accessible data, with a CVSS 3.1 base score of 6.5.
A critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools (8.61-8.63) enables low-privileged attackers with HTTP network access to create, delete, or modify critical data, rated with a CVSS 3.1 base score of 9.6.
A critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 enables unauthenticated remote attackers to access sensitive data via HTTP, with a CVSS 3.1 base score of 7.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows low-privileged network attackers to modify or delete critical data and cause system crashes, with a CVSS 3.1 base score of 8.1.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows a low-privileged attacker with HTTP network access to gain unauthorized read access to certain data, rated CVSS 3.1 base score 4.3.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a high-privileged attacker with network access to potentially gain unauthorized access to critical or all accessible data, with a CVSS 3.1 base score of 5.8.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows low-privileged users with logon access to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 2.5 indicating low confidentiality impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows a high-privileged attacker with infrastructure access and user interaction to cause unauthorized data modification, deletion, or denial of service, with a CVSS 3.1 score of 6.9.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows unauthenticated network attackers to cause unauthorized data modification, deletion, and denial of service, with a CVSS 3.1 base score of 8.1.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with HTTP network access to potentially compromise system confidentiality, integrity, and availability, rated with a CVSS 3.1 base score of 7.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows an unauthenticated attacker with infrastructure access and user interaction to potentially compromise system confidentiality, integrity, and availability, rated CVSS 7.0.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with infrastructure logon to access critical or all accessible PeopleSoft data, with a CVSS 3.1 base score of 6.2.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows low-privileged attackers with network access and user interaction to modify critical data, rated CVSS 3.1 base score 8.7.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows low-privileged attackers with logon access to modify data unauthorizedly, read sensitive information, and cause partial denial of service, rated CVSS 3.1 base score 5.3.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with HTTP network access to gain unauthorized read access to data, with a CVSS 3.1 base score of 5.3 indicating moderate confidentiality impact.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with HTTP network access to cause denial of service and unauthorized data access or modification, with a CVSS 3.1 base score of 7.6.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows low-privileged attackers with logon access to perform denial of service and unauthorized data manipulation, rated CVSS 3.1 base score 6.6.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Integration Broker (versions 8.61-8.63) allows unauthenticated network attackers via HTTP to potentially gain unauthorized access or modify critical data, with a CVSS 3.1 base score of 7.1.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows a low-privileged attacker with network access and user interaction to gain unauthorized read/write access to data, with a CVSS 3.1 score of 5.4.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with network access and user interaction to gain unauthorized read and write access to data, with a CVSS 3.1 base score of 5.4.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated remote attackers to gain unauthorized read access to data and cause partial denial of service, rated with a CVSS 3.1 base score of 6.5.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with HTTP network access to gain unauthorized read access to certain data, rated with a CVSS 3.1 base score of 4.3.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows unauthenticated network attackers to perform unauthorized read and write operations on accessible data, with a CVSS 3.1 base score of 6.1.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with network access to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 5.0.
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Oracle heeft nieuwe kwetsbaarheden verholpen in Oracle PeopleSoft Enterprise.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden in Oracle PeopleSoft Enterprise betreffen verschillende beveiligingsrisico\u0027s, waaronder ongeautoriseerde toegang tot gegevens, ongeautoriseerde wijzigingen van gegevens en verstoring van de beschikbaarheid van systemen (denial-of-service, DoS). Afhankelijk van de specifieke kwetsbaarheid kan misbruik leiden tot aantasting van de vertrouwelijkheid, integriteit of beschikbaarheid van gegevens en systemen. Sommige kwetsbaarheden zijn via het netwerk exploiteerbaar en vereisen geen authenticatie, terwijl andere lokale toegang, authenticatie of aanvullende voorwaarden vereisen. De kwetsbaarheden treffen diverse componenten van Oracle PeopleTools en andere PeopleSoft Enterprise-modules. De ernst en potenti\u00eble impact verschillen per kwetsbaarheid; de daadwerkelijke gevolgen zijn afhankelijk van de getroffen component, de configuratie en de voorwaarden voor exploitatie.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Oracle heeft updates uitgebracht om de kwetsbaarheden in Oracle PeopleSoft Enterprise PeopleTools te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "Improper Validation of Integrity Check Value",
"title": "CWE-354"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://www.oracle.com/security-alerts/cpuoct2026.html"
}
],
"title": "Kwetsbaarheden verholpen in Oracle PeopleSoft Enterprise ",
"tracking": {
"current_release_date": "2026-10-21T09:04:50.419856Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0439",
"initial_release_date": "2026-10-21T09:04:50.419856Z",
"revision_history": [
{
"date": "2026-10-21T09:04:50.419856Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "PeopleSoft Enterprise PeopleTools"
}
],
"category": "vendor",
"name": "Oracle"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-20925",
"notes": [
{
"category": "description",
"text": "Multiple vulnerabilities in Oracle Database Server, Java SE, GraalVM, PeopleSoft Enterprise PeopleTools, and NetApp products using Oracle Java SE libraries allow unauthenticated attackers with network access and sometimes human interaction to cause denial-of-service or unauthorized data modifications.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-20925 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-20925.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2024-20925"
},
{
"cve": "CVE-2026-9076",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "other",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "description",
"text": "Multiple OpenSSL vulnerabilities including heap buffer overflows, out-of-bounds reads, NULL pointer dereferences, use-after-free bugs, and cryptographic flaws affect various versions and products, potentially leading to denial of service or information disclosure without requiring password knowledge.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-9076 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9076.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-9076"
},
{
"cve": "CVE-2026-9563",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Eclipse Parsson versions before 1.1.8 and several Oracle products using it have a denial of service vulnerability due to lack of JSON size limits, allowing remote attackers to exhaust CPU and memory resources.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-9563 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9563.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-9563"
},
{
"cve": "CVE-2026-12816",
"cwe": {
"id": "CWE-354",
"name": "Improper Validation of Integrity Check Value"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Integrity Check Value",
"title": "CWE-354"
},
{
"category": "description",
"text": "Bouncy Castle Java versions before 1.85 and LTS before 2.73.12 have a length-dependent KDF split vulnerability enabling IESEngine stream-mode MAC forgery, affecting Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 with a CVSS score of 5.3 allowing unauthorized HTTPS data modification.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-12816 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-12816.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-12816"
},
{
"cve": "CVE-2026-33466",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "Logstash suffers from a path traversal vulnerability enabling arbitrary file writes and potential remote code execution with pipeline auto-reloading, while Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 has a critical HTTP flaw allowing full system compromise with a CVSS of 9.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-33466 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-33466.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-33466"
},
{
"cve": "CVE-2026-55200",
"notes": [
{
"category": "description",
"text": "Libssh2 versions through 1.11.1 contain multiple vulnerabilities including an out-of-bounds write in ssh2_transport_read() that enables remote code execution via crafted SSH packets, affecting various Linux distributions and Oracle PeopleSoft PeopleTools.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-55200 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-55200.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-55200"
},
{
"cve": "CVE-2026-60500",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Web Server versions 8.61 to 8.63 allows unauthenticated network attackers to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 5.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60500 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60500.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60500"
},
{
"cve": "CVE-2026-60743",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Weblogic component versions 8.61-8.63 allows unauthenticated network attackers via TLS to gain unauthorized access or modify critical data, with a CVSS 3.1 score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60743 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60743.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60743"
},
{
"cve": "CVE-2026-60745",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a high-privileged attacker with infrastructure logon to access critical or all accessible PeopleSoft data, with a CVSS 3.1 base score of 4.4 indicating confidentiality impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60745 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60745.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60745"
},
{
"cve": "CVE-2026-60809",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with network access to read and modify accessible data, with a CVSS 3.1 base score of 4.2 indicating low to moderate impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60809 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60809.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60809"
},
{
"cve": "CVE-2026-60814",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a high-privileged attacker with infrastructure logon to perform unauthorized data modifications, read access, and partial denial of service, rated CVSS 3.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60814 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60814.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60814"
},
{
"cve": "CVE-2026-60819",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with SSH access to potentially modify data, with a CVSS 3.1 base score of 3.7 indicating low integrity impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60819 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60819.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60819"
},
{
"cve": "CVE-2026-60839",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Query (versions 8.61 and 8.62) allows a high-privileged attacker with network access to cause denial of service and unauthorized data read/write, with a CVSS 3.1 score of 5.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60839 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60839.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60839"
},
{
"cve": "CVE-2026-60869",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows low-privileged attackers with HTTP access to modify or delete critical data and cause application crashes, rated CVSS 3.1 base score 6.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60869 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60869.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60869"
},
{
"cve": "CVE-2026-60874",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 and 8.62 allows a low-privileged network attacker to gain unauthorized read access to data and cause a partial denial of service, with a CVSS 3.1 base score of 4.2.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60874 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60874.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60874"
},
{
"cve": "CVE-2026-60876",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.62 Search Framework allows unauthenticated attackers with network access and user interaction to gain unauthorized read and write access to certain data, rated CVSS 3.1 base score 4.2.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60876 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60876.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60876"
},
{
"cve": "CVE-2026-60878",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Process Scheduler versions 8.61 and 8.62 allows a low-privileged attacker with network access and user interaction to gain unauthorized read and write access to data, with a CVSS 3.1 score of 4.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60878 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60878.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60878"
},
{
"cve": "CVE-2026-60881",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows a high-privileged attacker with HTTP network access to gain unauthorized data access or cause denial of service, with a CVSS 3.1 score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60881 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60881.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60881"
},
{
"cve": "CVE-2026-60882",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Search Framework versions 8.61 and 8.62 allows unauthenticated attackers with physical access to the communication segment to potentially access critical or all accessible data, rated CVSS 3.1 base score 5.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60882 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60882.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60882"
},
{
"cve": "CVE-2026-60885",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Push Notifications (versions 8.61 and 8.62) allows a high-privileged attacker with network access to fully compromise the system, with a CVSS 3.1 base score of 6.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60885 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60885.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60885"
},
{
"cve": "CVE-2026-60887",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Data Mover (versions 8.61-8.63) enables a high-privileged attacker with infrastructure access and user interaction to perform unauthorized data modifications, read access, and partial denial of service, rated CVSS 3.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60887 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60887.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60887"
},
{
"cve": "CVE-2026-60964",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62 allows a high-privileged attacker with infrastructure logon to gain unauthorized read access to certain data, with limited confidentiality impact and a CVSS score of 1.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60964 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60964.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 1.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60964"
},
{
"cve": "CVE-2026-60968",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows a high-privileged attacker with infrastructure access to cause data modification, deletion, or denial of service, rated CVSS 6.0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60968 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60968.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-60968"
},
{
"cve": "CVE-2026-70860",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina 9.1 allows a low-privileged attacker with HTTP network access to create, delete, or modify critical data and gain unauthorized read access, with a CVSS 3.1 score of 5.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-70860 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70860.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-70860"
},
{
"cve": "CVE-2026-70869",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Integration Broker (versions 8.61-8.63) allows unauthenticated attackers with network access and user interaction to gain unauthorized read and write access, with a CVSS 3.1 score of 4.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-70869 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70869.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-70869"
},
{
"cve": "CVE-2026-83372",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with network access and user interaction to gain unauthorized read and write access to data, with a CVSS 3.1 base score of 5.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-83372 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-83372.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-83372"
},
{
"cve": "CVE-2026-83373",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with network access and user interaction to gain unauthorized read access, with a CVSS 3.1 base score of 3.0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-83373 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-83373.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.0,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-83373"
},
{
"cve": "CVE-2026-83375",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise HCM Human Resources 9.2 allows a high-privileged attacker with network access and user interaction to manipulate critical data, read unauthorized data, or cause denial of service, rated CVSS 6.0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-83375 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-83375.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-83375"
},
{
"cve": "CVE-2026-83427",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Multichannel Framework versions 8.61-8.63 allows a high-privileged attacker with HTTP network access to potentially compromise system confidentiality, integrity, and availability, rated CVSS 3.1 score 6.6.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-83427 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-83427.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-83427"
},
{
"cve": "CVE-2026-87336",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with network access to potentially gain unauthorized access to critical or all accessible data, with a CVSS 3.1 base score of 5.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87336 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87336.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87336"
},
{
"cve": "CVE-2026-87340",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows unauthenticated network attackers to perform unauthorized data modifications, with a CVSS 3.1 base score of 3.7 indicating low integrity impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87340 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87340.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87340"
},
{
"cve": "CVE-2026-87342",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with HTTP network access to potentially gain unauthorized access or modify critical data, rated with a CVSS 3.1 base score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87342 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87342.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87342"
},
{
"cve": "CVE-2026-87343",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows unauthenticated network attackers to perform unauthorized read and write operations, with a CVSS 3.1 base score of 4.8 indicating moderate confidentiality and integrity impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87343 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87343.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87343"
},
{
"cve": "CVE-2026-87344",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63) LDAP component allows unauthenticated network attackers via HTTP to perform unauthorized read and write operations, with a CVSS 3.1 base score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87344 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87344.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87344"
},
{
"cve": "CVE-2026-87345",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows unauthenticated attackers with HTTP network access to perform unauthorized read and write operations, with a CVSS 3.1 base score of 6.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87345 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87345.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87345"
},
{
"cve": "CVE-2026-87348",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a high-privileged attacker with infrastructure access to modify data, read sensitive information, and cause partial denial of service, rated CVSS 3.1 base score 4.2.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87348 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87348.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87348"
},
{
"cve": "CVE-2026-87349",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63 allows a high-privileged attacker with system access and user interaction to potentially compromise the PeopleSoft environment, with a CVSS 3.1 base score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87349 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87349.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87349"
},
{
"cve": "CVE-2026-87350",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows low-privileged attackers with logon access to perform unauthorized data modifications, read sensitive data, and cause partial denial of service, rated CVSS 4.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87350 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87350.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87350"
},
{
"cve": "CVE-2026-87352",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows low-privileged users with logon access to perform unauthorized read and write operations, with a CVSS 3.1 base score of 4.4 indicating moderate confidentiality and integrity impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87352 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87352.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87352"
},
{
"cve": "CVE-2026-87353",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows unauthenticated attackers with infrastructure logon and user interaction to read, update, delete data, and cause partial denial of service, rated CVSS 4.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87353 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87353.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87353"
},
{
"cve": "CVE-2026-87355",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with network access and user interaction to gain unauthorized read and write access to certain data, with a CVSS 3.1 base score of 4.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87355 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87355.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87355"
},
{
"cve": "CVE-2026-87401",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools XML Publisher (versions 8.61-8.63) allows low-privileged users with logon access to read unauthorized data, with a CVSS 3.1 base score of 3.3 indicating limited confidentiality impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87401 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87401.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87401"
},
{
"cve": "CVE-2026-87409",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools nVision component versions 8.61-8.63 allows low-privileged attackers with HTTP network access to gain unauthorized access to critical or all accessible data, rated CVSS 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87409 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87409.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87409"
},
{
"cve": "CVE-2026-87410",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows unauthenticated attackers with HTTP network access to gain unauthorized access to critical or all accessible data, rated CVSS 3.1 base score 6.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87410 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87410.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87410"
},
{
"cve": "CVE-2026-87412",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows a high-privileged attacker with HTTP network access to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 2.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87412 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87412.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87412"
},
{
"cve": "CVE-2026-87415",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows unauthenticated network attackers to potentially access critical data, with a CVSS 3.1 base score of 5.3 and requiring user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87415 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87415.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87415"
},
{
"cve": "CVE-2026-87416",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows unauthenticated network attackers to gain unauthorized read access to data, with a CVSS 3.1 base score of 3.7 indicating low confidentiality impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87416 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87416.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87416"
},
{
"cve": "CVE-2026-87418",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63 allows low-privileged authenticated users to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 2.5 indicating limited confidentiality impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87418 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87418.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-87418"
},
{
"cve": "CVE-2026-91263",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows low-privileged network attackers to perform unauthorized read and write operations, with a CVSS 3.1 base score of 4.9 indicating moderate confidentiality and integrity impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91263 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91263.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91263"
},
{
"cve": "CVE-2026-91264",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise SCM Manufacturing 9.2 allows unauthenticated network attackers via HTTP to perform unauthorized data modifications, with a CVSS 3.1 base score of 3.7 indicating low to moderate integrity impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91264 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91264.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91264"
},
{
"cve": "CVE-2026-91331",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 allows a high-privileged attacker with HTTP network access to perform unauthorized read and write operations, with a CVSS 3.1 score of 3.8 indicating low to moderate impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91331 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91331.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91331"
},
{
"cve": "CVE-2026-91356",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2 allows a high-privileged attacker with infrastructure access to perform unauthorized data modifications, read access, and partial denial of service, rated CVSS 4.2.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91356 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91356.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91356"
},
{
"cve": "CVE-2026-91465",
"notes": [
{
"category": "description",
"text": "A critical vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina 9.1 allows unauthenticated network attackers via Oracle Net to access sensitive data, rated with a CVSS 3.1 base score of 7.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91465 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91465.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91465"
},
{
"cve": "CVE-2026-91466",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina 9.1 allows a high-privileged attacker with network access and user interaction to manipulate critical data, access all accessible data, and cause partial denial of service, scoring 6.4 on CVSS 3.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91466 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91466.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91466"
},
{
"cve": "CVE-2026-91468",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated remote attackers to modify data and cause partial denial of service via HTTP, with a CVSS 3.1 base score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91468 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91468.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91468"
},
{
"cve": "CVE-2026-91471",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 allows unauthenticated network attackers via HTTP to perform unauthorized data modifications, with a CVSS 3.1 base score of 3.7 indicating low to moderate integrity impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91471 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91471.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91471"
},
{
"cve": "CVE-2026-91474",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 allows a high-privileged attacker with network access to create, delete, or modify critical data, with a CVSS 3.1 score of 6.1 indicating significant confidentiality and integrity impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91474 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91474.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91474"
},
{
"cve": "CVE-2026-91476",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 allows unauthenticated network attackers to gain unauthorized read access to data, with a CVSS 3.1 base score of 5.3 indicating moderate confidentiality impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91476 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91476.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91476"
},
{
"cve": "CVE-2026-91478",
"notes": [
{
"category": "description",
"text": "A critical vulnerability in Oracle PeopleSoft Enterprise SCM Strategic Sourcing 9.2 allows a low-privileged attacker with HTTP network access to fully compromise the system, with a CVSS 3.1 base score of 8.8 indicating high severity.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91478 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91478.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91478"
},
{
"cve": "CVE-2026-91480",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise SCM Strategic Sourcing 9.2 allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical data, rated with a CVSS 3.1 base score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91480 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91480.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91480"
},
{
"cve": "CVE-2026-91481",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise SCM Purchasing 9.2 allows a low-privileged attacker with network access and user interaction to gain unauthorized read/write access to certain data, with a CVSS 3.1 score of 5.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91481 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91481.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91481"
},
{
"cve": "CVE-2026-91482",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise SCM Strategic Sourcing 9.2 allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical data, with a CVSS 3.1 base score of 6.5 indicating significant confidentiality impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91482 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91482.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91482"
},
{
"cve": "CVE-2026-91485",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise FIN Cash Management 9.2 allows a high-privileged attacker with infrastructure access and user interaction to perform unauthorized data modifications, read access, and partial denial of service, rated CVSS 3.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91485 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91485.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91485"
},
{
"cve": "CVE-2026-91486",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise FIN General Ledger Brazil 9.1 allows low-privileged attackers with logon access to perform unauthorized data modifications and partial denial of service, with a CVSS 3.1 score of 4.4 affecting integrity and availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91486 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91486.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91486"
},
{
"cve": "CVE-2026-91497",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows unauthenticated attackers with HTTP network access to perform unauthorized data modification operations, with a CVSS 3.1 base score of 5.3 indicating integrity impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91497 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91497.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91497"
},
{
"cve": "CVE-2026-91505",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62 allows a high-privileged attacker with infrastructure access to manipulate critical data, rated with a CVSS 3.1 base score of 6.0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91505 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91505.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91505"
},
{
"cve": "CVE-2026-91519",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical or all accessible data, rated CVSS 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91519 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91519.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91519"
},
{
"cve": "CVE-2026-91541",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 allows unauthenticated network attackers to perform unauthorized data modifications and cause partial denial of service, with a CVSS 3.1 base score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91541 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91541.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91541"
},
{
"cve": "CVE-2026-91553",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise FIN Product Configurator Brazil 9.1 allows low-privileged attackers with infrastructure access to perform unauthorized data modifications and cause partial denial of service, rated CVSS 4.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91553 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91553.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91553"
},
{
"cve": "CVE-2026-91559",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise FIN Manufacturing Brazil 9.1 allows low-privileged attackers with infrastructure access to modify data unauthorizedly and cause partial denial of service, rated CVSS 3.1 score 4.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91559 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91559.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91559"
},
{
"cve": "CVE-2026-91562",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise FIN Inventory Brazil 9.1 allows low-privileged attackers with infrastructure access to modify data unauthorizedly and cause partial denial of service, rated CVSS 3.1 score 4.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-91562 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-91562.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-91562"
},
{
"cve": "CVE-2026-101388",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with network access to gain unauthorized access to critical data or cause partial denial of service, rated CVSS 3.1 base score 7.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101388 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101388.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101388"
},
{
"cve": "CVE-2026-101389",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated network attackers to cause denial of service by hanging or crashing the system, with a CVSS 3.1 base score of 5.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101389 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101389.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101389"
},
{
"cve": "CVE-2026-101390",
"notes": [
{
"category": "description",
"text": "A high-severity vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated remote attackers to potentially compromise system confidentiality, integrity, and availability via HTTP access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101390 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101390.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101390"
},
{
"cve": "CVE-2026-101407",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a high-privileged attacker with HTTP network access to gain unauthorized access to critical data or cause partial denial of service, rated CVSS 3.1 score 5.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101407 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101407.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101407"
},
{
"cve": "CVE-2026-101409",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution versions 8.61 to 8.63 allows unauthenticated remote attackers to access critical or all accessible data via HTTP, with a CVSS 3.1 base score of 7.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101409 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101409.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101409"
},
{
"cve": "CVE-2026-101410",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with HTTP network access to potentially compromise system confidentiality, integrity, and availability, with a CVSS 3.1 base score of 7.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101410 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101410.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101410"
},
{
"cve": "CVE-2026-101411",
"notes": [
{
"category": "description",
"text": "A high-severity vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated remote attackers to potentially compromise system confidentiality, integrity, and availability via HTTP access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101411 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101411.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101411"
},
{
"cve": "CVE-2026-101412",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows low-privileged attackers with logon access to modify critical data, read unauthorized data, and cause partial denial of service, rated CVSS 5.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101412 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101412.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101412"
},
{
"cve": "CVE-2026-101413",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with network access to cause a denial of service by hanging or crashing the system, with a CVSS 3.1 base score of 5.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101413 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101413.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101413"
},
{
"cve": "CVE-2026-101414",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows an unauthenticated attacker with infrastructure logon to perform unauthorized data modifications, with a CVSS 3.1 base score of 2.9 indicating low integrity impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101414 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101414.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101414"
},
{
"cve": "CVE-2026-101415",
"notes": [
{
"category": "description",
"text": "A low-severity vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with network access to cause a partial denial of service, rated CVSS 3.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101415 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101415.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101415"
},
{
"cve": "CVE-2026-101416",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows an unauthenticated attacker with physical access to the communication segment to potentially compromise system confidentiality, integrity, and availability, with a CVSS 3.1 score of 7.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101416 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101416.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101416"
},
{
"cve": "CVE-2026-101417",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with HTTP network access to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 3.7 indicating low confidentiality impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101417 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101417.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101417"
},
{
"cve": "CVE-2026-101418",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical or all accessible data, rated CVSS 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101418 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101418.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101418"
},
{
"cve": "CVE-2026-101419",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical or all accessible data, with a CVSS 3.1 base score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101419 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101419.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101419"
},
{
"cve": "CVE-2026-101420",
"notes": [
{
"category": "description",
"text": "A critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools (8.61-8.63) enables low-privileged attackers with HTTP network access to create, delete, or modify critical data, rated with a CVSS 3.1 base score of 9.6.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101420 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101420.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101420"
},
{
"cve": "CVE-2026-101421",
"notes": [
{
"category": "description",
"text": "A critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 enables unauthenticated remote attackers to access sensitive data via HTTP, with a CVSS 3.1 base score of 7.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101421 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101421.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101421"
},
{
"cve": "CVE-2026-101422",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows low-privileged network attackers to modify or delete critical data and cause system crashes, with a CVSS 3.1 base score of 8.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101422 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101422.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101422"
},
{
"cve": "CVE-2026-101423",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows a low-privileged attacker with HTTP network access to gain unauthorized read access to certain data, rated CVSS 3.1 base score 4.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101423 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101423.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101423"
},
{
"cve": "CVE-2026-101424",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a high-privileged attacker with network access to potentially gain unauthorized access to critical or all accessible data, with a CVSS 3.1 base score of 5.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101424 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101424.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101424"
},
{
"cve": "CVE-2026-101425",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows low-privileged users with logon access to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 2.5 indicating low confidentiality impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101425 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101425.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101425"
},
{
"cve": "CVE-2026-101426",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows a high-privileged attacker with infrastructure access and user interaction to cause unauthorized data modification, deletion, or denial of service, with a CVSS 3.1 score of 6.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101426 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101426.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101426"
},
{
"cve": "CVE-2026-101427",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution (versions 8.61-8.63) allows unauthenticated network attackers to cause unauthorized data modification, deletion, and denial of service, with a CVSS 3.1 base score of 8.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101427 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101427.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101427"
},
{
"cve": "CVE-2026-101428",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with HTTP network access to potentially compromise system confidentiality, integrity, and availability, rated with a CVSS 3.1 base score of 7.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101428 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101428.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101428"
},
{
"cve": "CVE-2026-101429",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows an unauthenticated attacker with infrastructure access and user interaction to potentially compromise system confidentiality, integrity, and availability, rated CVSS 7.0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101429 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101429.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101429"
},
{
"cve": "CVE-2026-101430",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with infrastructure logon to access critical or all accessible PeopleSoft data, with a CVSS 3.1 base score of 6.2.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101430 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101430.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101430"
},
{
"cve": "CVE-2026-101431",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows low-privileged attackers with network access and user interaction to modify critical data, rated CVSS 3.1 base score 8.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101431 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101431.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101431"
},
{
"cve": "CVE-2026-101432",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows low-privileged attackers with logon access to modify data unauthorizedly, read sensitive information, and cause partial denial of service, rated CVSS 3.1 base score 5.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101432 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101432.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101432"
},
{
"cve": "CVE-2026-101433",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with HTTP network access to gain unauthorized read access to data, with a CVSS 3.1 base score of 5.3 indicating moderate confidentiality impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101433 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101433.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101433"
},
{
"cve": "CVE-2026-101434",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated attackers with HTTP network access to cause denial of service and unauthorized data access or modification, with a CVSS 3.1 base score of 7.6.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101434 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101434.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101434"
},
{
"cve": "CVE-2026-101435",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows low-privileged attackers with logon access to perform denial of service and unauthorized data manipulation, rated CVSS 3.1 base score 6.6.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101435 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101435.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101435"
},
{
"cve": "CVE-2026-101450",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Integration Broker (versions 8.61-8.63) allows unauthenticated network attackers via HTTP to potentially gain unauthorized access or modify critical data, with a CVSS 3.1 base score of 7.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101450 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101450.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101450"
},
{
"cve": "CVE-2026-101486",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows a low-privileged attacker with network access and user interaction to gain unauthorized read/write access to data, with a CVSS 3.1 score of 5.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101486 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101486.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101486"
},
{
"cve": "CVE-2026-101487",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with network access and user interaction to gain unauthorized read and write access to data, with a CVSS 3.1 base score of 5.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101487 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101487.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101487"
},
{
"cve": "CVE-2026-101488",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows unauthenticated remote attackers to gain unauthorized read access to data and cause partial denial of service, rated with a CVSS 3.1 base score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101488 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101488.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101488"
},
{
"cve": "CVE-2026-101489",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal versions 8.61 to 8.63 allows a low-privileged attacker with HTTP network access to gain unauthorized read access to certain data, rated with a CVSS 3.1 base score of 4.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101489 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101489.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101489"
},
{
"cve": "CVE-2026-101490",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 allows unauthenticated network attackers to perform unauthorized read and write operations on accessible data, with a CVSS 3.1 base score of 6.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101490 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101490.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101490"
},
{
"cve": "CVE-2026-101491",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 allows a low-privileged attacker with network access to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 5.0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101491 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101491.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101491"
}
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.