Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpuapr2026.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Apr 2026, 15:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.oracle.com/security-alerts/cpuapr2026.html - Vendor Advisory | |
| CPE | cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.62:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.61:*:*:*:*:*:*:* |
|
| First Time |
Oracle peoplesoft Enterprise Peopletools
Oracle |
22 Apr 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-400 CWE-284 |
21 Apr 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-21 21:16
Updated : 2026-04-23 15:08
NVD link : CVE-2026-34277
Mitre link : CVE-2026-34277
CVE.ORG link : CVE-2026-34277
JSON object : View
Products Affected
oracle
- peoplesoft_enterprise_peopletools