CVE-2026-87264: High severity Oracle PeopleSoft Enterprise PeopleTools (Integration Broker) vulnerability
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs network access to the affected Integration Broker over HTTP and low-level privileges in PeopleSoft Enterprise PeopleTools. No user interaction is required.
Which deployments are known to be affected?
The affected supported PeopleSoft Enterprise PeopleTools versions are 8.61 through 8.63, specifically the Integration Broker component.
What could a successful attacker do?
A successful attack can enable unauthorized creation, deletion, or modification of critical data or all data accessible through PeopleSoft Enterprise PeopleTools. The scope may extend to additional products.