{"schema_version":1,"title":"Oracle PeopleSoft PeopleTools vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Oracle PeopleSoft PeopleTools: 0 in the last 7 days and 13 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-91497, was published on 20 October 2026. 12 vulnerabilities in the last four weeks, up 1100% on the four before (1). 1 critical against 0.","url":"https://junglewise.ai/threats/technologies/peoplesoft-peopletools","json_url":"https://junglewise.ai/threats/technologies/peoplesoft-peopletools.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/peoplesoft-peopletools","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":3,"all_time":13,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":12,"last_90_days":13,"last_365_days":13},"latest":[{"cve":"CVE-2026-91497","cvss":5.3,"slug":"cve-2026-91497-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools unauthorized data modification","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:54.33+00:00","url":"https://junglewise.ai/threats/cve-2026-91497-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-87409","cvss":6.5,"slug":"cve-2026-87409-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools nVision data access vulnerability","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:19.25+00:00","url":"https://junglewise.ai/threats/cve-2026-87409-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-87355","cvss":4.4,"slug":"cve-2026-87355-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools cross-site request forgery in Panel Processor","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:13.31+00:00","url":"https://junglewise.ai/threats/cve-2026-87355-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-87352","cvss":4.4,"slug":"cve-2026-87352-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools LDAP privilege escalation","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:12.933+00:00","url":"https://junglewise.ai/threats/cve-2026-87352-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-87348","cvss":4.2,"slug":"cve-2026-87348-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools data modification in Environment Management","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:12.47+00:00","url":"https://junglewise.ai/threats/cve-2026-87348-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-87344","cvss":6.5,"slug":"cve-2026-87344-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools LDAP unauthenticated data access","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:12.023+00:00","url":"https://junglewise.ai/threats/cve-2026-87344-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-87336","cvss":5.3,"slug":"cve-2026-87336-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools Portal unauthorized data access","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:11.24+00:00","url":"https://junglewise.ai/threats/cve-2026-87336-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-83427","cvss":6.6,"slug":"cve-2026-83427-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools system compromise in Multichannel Framework","severity":"medium","exploited":false,"published_at":"2026-10-20T22:19:57.6+00:00","url":"https://junglewise.ai/threats/cve-2026-83427-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-60839","cvss":5.5,"slug":"cve-2026-60839-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools denial of service and data access in Query","severity":"medium","exploited":false,"published_at":"2026-10-20T22:19:32.487+00:00","url":"https://junglewise.ai/threats/cve-2026-60839-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-101427","cvss":8.1,"slug":"cve-2026-101427-vulnerability-in-the-peoplesoft-enterprise-peopletools-product","title":"Oracle PeopleSoft PeopleTools code injection in Report Distribution","severity":"high","exploited":false,"published_at":"2026-10-20T22:17:51.017+00:00","url":"https://junglewise.ai/threats/cve-2026-101427-vulnerability-in-the-peoplesoft-enterprise-peopletools-product"},{"cve":"CVE-2026-101420","cvss":9.6,"slug":"cve-2026-101420-vulnerability-in-the-peoplesoft-enterprise-peopletools-product","title":"Oracle PeopleSoft PeopleTools SQR data access vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-20T22:17:50.2+00:00","url":"https://junglewise.ai/threats/cve-2026-101420-vulnerability-in-the-peoplesoft-enterprise-peopletools-product"},{"cve":"CVE-2026-101409","cvss":7.5,"slug":"cve-2026-101409-vulnerability-in-the-peoplesoft-enterprise-peopletools-product","title":"Oracle PeopleSoft PeopleTools unauthorized data access in Report Distribution","severity":"high","exploited":false,"published_at":"2026-10-20T22:17:48.943+00:00","url":"https://junglewise.ai/threats/cve-2026-101409-vulnerability-in-the-peoplesoft-enterprise-peopletools-product"},{"cve":"CVE-2026-83014","cvss":8.1,"epss":0.0038,"slug":"cve-2026-83014-oracle-peoplesoft-peopletools-data-modification-and-denial-of","title":"Oracle PeopleSoft PeopleTools data modification and denial of service in Cube Manager","severity":"high","exploited":false,"published_at":"2026-09-15T20:18:08.18+00:00","url":"https://junglewise.ai/threats/cve-2026-83014-oracle-peoplesoft-peopletools-data-modification-and-denial-of"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":1,"exploited":0,"vulnerabilities":12},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Oracle MySQL Server","slug":"mysql-server","vulnerabilities":163,"url":"https://junglewise.ai/threats/technologies/mysql-server"},{"name":"Oracle Hyperion Financial Management","slug":"hyperion-financial-management","vulnerabilities":142,"url":"https://junglewise.ai/threats/technologies/hyperion-financial-management"},{"name":"Oracle Helidon","slug":"helidon","vulnerabilities":130,"url":"https://junglewise.ai/threats/technologies/helidon"},{"name":"Oracle MySQL Cluster","slug":"mysql-cluster","vulnerabilities":129,"url":"https://junglewise.ai/threats/technologies/mysql-cluster"},{"name":"Oracle Coherence","slug":"coherence","vulnerabilities":113,"url":"https://junglewise.ai/threats/technologies/coherence"},{"name":"Oracle E-Business Suite","slug":"e-business-suite","vulnerabilities":110,"url":"https://junglewise.ai/threats/technologies/e-business-suite"},{"name":"Oracle WebCenter Content","slug":"webcenter-content","vulnerabilities":110,"url":"https://junglewise.ai/threats/technologies/webcenter-content"},{"name":"Oracle Commerce Guided Search","slug":"commerce-guided-search","vulnerabilities":104,"url":"https://junglewise.ai/threats/technologies/commerce-guided-search"},{"name":"Oracle Commerce Experience Manager","slug":"commerce-experience-manager","vulnerabilities":102,"url":"https://junglewise.ai/threats/technologies/commerce-experience-manager"},{"name":"Oracle JD Edwards EnterpriseOne Tools","slug":"jd-edwards-enterpriseone-tools","vulnerabilities":101,"url":"https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools"},{"name":"Oracle PeopleSoft Enterprise PeopleTools","slug":"peopletools","vulnerabilities":101,"url":"https://junglewise.ai/threats/technologies/peopletools"},{"name":"Oracle Java SE","slug":"java-se","vulnerabilities":92,"url":"https://junglewise.ai/threats/technologies/java-se"}],"technology":{"hub":true,"name":"Oracle PeopleSoft PeopleTools","slug":"peoplesoft-peopletools","vendor":{"hub":true,"name":"Oracle","slug":"oracle","url":"https://junglewise.ai/threats/vendors/oracle"},"aliases":[],"category":"framework","description":"Oracle development framework for building PeopleSoft enterprise applications.","url":"https://junglewise.ai/threats/technologies/peoplesoft-peopletools"},"most_severe":[{"cve":"CVE-2026-101420","cvss":9.6,"slug":"cve-2026-101420-vulnerability-in-the-peoplesoft-enterprise-peopletools-product","title":"Oracle PeopleSoft PeopleTools SQR data access vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-20T22:17:50.2+00:00","url":"https://junglewise.ai/threats/cve-2026-101420-vulnerability-in-the-peoplesoft-enterprise-peopletools-product"},{"cve":"CVE-2026-83014","cvss":8.1,"epss":0.0038,"slug":"cve-2026-83014-oracle-peoplesoft-peopletools-data-modification-and-denial-of","title":"Oracle PeopleSoft PeopleTools data modification and denial of service in Cube Manager","severity":"high","exploited":false,"published_at":"2026-09-15T20:18:08.18+00:00","url":"https://junglewise.ai/threats/cve-2026-83014-oracle-peoplesoft-peopletools-data-modification-and-denial-of"},{"cve":"CVE-2026-101427","cvss":8.1,"slug":"cve-2026-101427-vulnerability-in-the-peoplesoft-enterprise-peopletools-product","title":"Oracle PeopleSoft PeopleTools code injection in Report Distribution","severity":"high","exploited":false,"published_at":"2026-10-20T22:17:51.017+00:00","url":"https://junglewise.ai/threats/cve-2026-101427-vulnerability-in-the-peoplesoft-enterprise-peopletools-product"},{"cve":"CVE-2026-101409","cvss":7.5,"slug":"cve-2026-101409-vulnerability-in-the-peoplesoft-enterprise-peopletools-product","title":"Oracle PeopleSoft PeopleTools unauthorized data access in Report Distribution","severity":"high","exploited":false,"published_at":"2026-10-20T22:17:48.943+00:00","url":"https://junglewise.ai/threats/cve-2026-101409-vulnerability-in-the-peoplesoft-enterprise-peopletools-product"},{"cve":"CVE-2026-83427","cvss":6.6,"slug":"cve-2026-83427-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools system compromise in Multichannel Framework","severity":"medium","exploited":false,"published_at":"2026-10-20T22:19:57.6+00:00","url":"https://junglewise.ai/threats/cve-2026-83427-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-87409","cvss":6.5,"slug":"cve-2026-87409-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools nVision data access vulnerability","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:19.25+00:00","url":"https://junglewise.ai/threats/cve-2026-87409-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-87344","cvss":6.5,"slug":"cve-2026-87344-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools LDAP unauthenticated data access","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:12.023+00:00","url":"https://junglewise.ai/threats/cve-2026-87344-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-60839","cvss":5.5,"slug":"cve-2026-60839-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools denial of service and data access in Query","severity":"medium","exploited":false,"published_at":"2026-10-20T22:19:32.487+00:00","url":"https://junglewise.ai/threats/cve-2026-60839-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-91497","cvss":5.3,"slug":"cve-2026-91497-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools unauthorized data modification","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:54.33+00:00","url":"https://junglewise.ai/threats/cve-2026-91497-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"},{"cve":"CVE-2026-87336","cvss":5.3,"slug":"cve-2026-87336-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of","title":"Oracle PeopleSoft PeopleTools Portal unauthorized data access","severity":"medium","exploited":false,"published_at":"2026-10-20T22:20:11.24+00:00","url":"https://junglewise.ai/threats/cve-2026-87336-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}