# Oracle PeopleSoft Enterprise PeopleTools vulnerabilities Source: https://junglewise.ai/threats/technologies/peopletools Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/peopletools.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 101 vulnerabilities in Oracle PeopleSoft Enterprise PeopleTools: 0 in the last 7 days and 78 in the last 90 days, 3 of them critical and 2 exploited in the wild. The most recent, CVE-2026-91519, was published on 20 October 2026. 57 vulnerabilities in the last four weeks, up 418% on the four before (11). ## Counts - Last 7 days: 0 - Last 30 days: 57 - Last 90 days: 78 - All time: 101 (3 critical, 2 exploited in the wild) ## About Oracle PeopleSoft Enterprise PeopleTools Oracle enterprise application development framework for building PeopleSoft business applications. ## Latest Oracle PeopleSoft Enterprise PeopleTools vulnerabilities - [CVE-2026-91519: Oracle PeopleSoft Enterprise PeopleTools unauthorized data access in Report Distribution](https://junglewise.ai/threats/cve-2026-91519-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-91505: Oracle PeopleSoft Enterprise PeopleTools privilege escalation in Porting](https://junglewise.ai/threats/cve-2026-91505-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6, published 20 Oct 2026) - [CVE-2026-91468: Oracle PeopleSoft Enterprise PeopleTools data integrity and availability in QAS component](https://junglewise.ai/threats/cve-2026-91468-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-91263: Oracle PeopleSoft Enterprise PeopleTools unauthorized data access in Notification Configuration](https://junglewise.ai/threats/cve-2026-91263-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 4.9, published 20 Oct 2026) - [CVE-2026-87415: Oracle PeopleSoft Enterprise PeopleTools authorization bypass in Report Distribution](https://junglewise.ai/threats/cve-2026-87415-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 5.3, published 20 Oct 2026) - [CVE-2026-87410: Oracle PeopleSoft Enterprise PeopleTools unauthorized data access in Report Distribution](https://junglewise.ai/threats/cve-2026-87410-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6.8, published 20 Oct 2026) - [CVE-2026-87353: Oracle PeopleSoft Enterprise PeopleTools data access vulnerability in Porting](https://junglewise.ai/threats/cve-2026-87353-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 4.5, published 20 Oct 2026) - [CVE-2026-87350: Oracle PeopleSoft Enterprise PeopleTools privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-87350-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 4.5, published 20 Oct 2026) - [CVE-2026-87349: Oracle PeopleSoft Enterprise PeopleTools privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-87349-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-87345: Oracle PeopleSoft Enterprise PeopleTools cross-site request forgery in Business Interlink](https://junglewise.ai/threats/cve-2026-87345-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6.1, published 20 Oct 2026) - [CVE-2026-87343: Oracle PeopleSoft PeopleTools Portal unauthorized access](https://junglewise.ai/threats/cve-2026-87343-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 4.8, published 20 Oct 2026) - [CVE-2026-87342: Oracle PeopleSoft Enterprise PeopleTools authentication bypass in Security component](https://junglewise.ai/threats/cve-2026-87342-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-83372: Oracle PeopleSoft Enterprise PeopleTools unauthorized data access in Portal](https://junglewise.ai/threats/cve-2026-83372-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 5.4, published 20 Oct 2026) - [CVE-2026-70869: Oracle PeopleSoft Enterprise PeopleTools Integration Broker cross-site request forgery](https://junglewise.ai/threats/cve-2026-70869-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 4.7, published 20 Oct 2026) - [CVE-2026-60968: Oracle PeopleSoft Enterprise PeopleTools data corruption in Environment Mgmt](https://junglewise.ai/threats/cve-2026-60968-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6, published 20 Oct 2026) - [CVE-2026-60885: Oracle PeopleSoft Enterprise PeopleTools privilege escalation in Push Notifications](https://junglewise.ai/threats/cve-2026-60885-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6.8, published 20 Oct 2026) - [CVE-2026-60882: Oracle PeopleSoft Enterprise PeopleTools Search Framework unauthorized data access](https://junglewise.ai/threats/cve-2026-60882-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 5.3, published 20 Oct 2026) - [CVE-2026-60881: Oracle PeopleSoft Enterprise PeopleTools metadata access and DoS vulnerability](https://junglewise.ai/threats/cve-2026-60881-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-60878: Oracle PeopleSoft Enterprise PeopleTools authorization bypass in Process Scheduler](https://junglewise.ai/threats/cve-2026-60878-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 4.4, published 20 Oct 2026) - [CVE-2026-60876: Oracle PeopleSoft Enterprise PeopleTools data manipulation in Search Framework](https://junglewise.ai/threats/cve-2026-60876-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 4.2, published 20 Oct 2026) - [CVE-2026-60874: Oracle PeopleSoft Enterprise PeopleTools unauthorized access in Portal](https://junglewise.ai/threats/cve-2026-60874-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 4.2, published 20 Oct 2026) - [CVE-2026-60869: Oracle PeopleSoft Enterprise PeopleTools data integrity and availability compromise in Application Data Sets](https://junglewise.ai/threats/cve-2026-60869-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6.8, published 20 Oct 2026) - [CVE-2026-60809: Oracle PeopleSoft Enterprise PeopleTools data manipulation via physical access](https://junglewise.ai/threats/cve-2026-60809-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 4.2, published 20 Oct 2026) - [CVE-2026-60745: Oracle PeopleSoft Enterprise PeopleTools unauthorized data access in Application Server JRE](https://junglewise.ai/threats/cve-2026-60745-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 4.4, published 20 Oct 2026) - [CVE-2026-60743: Oracle PeopleSoft Enterprise PeopleTools TLS authentication bypass](https://junglewise.ai/threats/cve-2026-60743-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (medium, CVSS 6.5, published 20 Oct 2026) ## Most severe Oracle PeopleSoft Enterprise PeopleTools vulnerabilities - [CVE-2026-35273: Oracle PeopleSoft PeopleTools compromise in Updates Environment Management](https://junglewise.ai/threats/cve-2026-35273-oracle-peoplesoft-peopletools-compromise-in-updates-environment) (critical, exploited in the wild, CVSS 9.8, published 11 Jun 2026) - [CVE-2019-2725: Oracle WebLogic Server, Injection](https://junglewise.ai/threats/cve-2019-2725-oracle-weblogic-server-injection) (critical, exploited in the wild, CVSS 9.8, published 10 Jan 2022) - [CVE-2026-60821: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink)…](https://junglewise.ai/threats/cve-2026-60821-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (critical, CVSS 9.8, published 18 Aug 2026) - [CVE-2026-83017: Oracle PeopleSoft Enterprise PeopleTools privilege escalation in Report Distribution](https://junglewise.ai/threats/cve-2026-83017-oracle-peoplesoft-enterprise-peopletools-privilege-escalation-in) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-60879: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Configuration…](https://junglewise.ai/threats/cve-2026-60879-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (high, CVSS 8.8, published 18 Aug 2026) - [CVE-2026-60967: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). Supported…](https://junglewise.ai/threats/cve-2026-60967-vulnerability-in-the-peoplesoft-enterprise-peopletools-product-of) (high, CVSS 8.8, published 18 Aug 2026) - [CVE-2026-101431: Oracle PeopleSoft Enterprise PeopleTools CSRF or XSS in Test Framework](https://junglewise.ai/threats/cve-2026-101431-vulnerability-in-the-peoplesoft-enterprise-peopletools-product) (high, CVSS 8.7, published 20 Oct 2026) - [CVE-2026-47017: Oracle PeopleSoft Enterprise PeopleTools vulnerability in Process Scheduler](https://junglewise.ai/threats/cve-2026-47017-oracle-peoplesoft-enterprise-peopletools-vulnerability-in-process) (high, CVSS 8.7, published 21 Jul 2026) - [CVE-2026-82993: Oracle PeopleSoft Enterprise PeopleTools authentication bypass in Business Interlink](https://junglewise.ai/threats/cve-2026-82993-oracle-peoplesoft-enterprise-peopletools-authentication-bypass-in) (high, CVSS 8.5, published 15 Sep 2026) - [CVE-2026-83019: Oracle PeopleSoft Enterprise PeopleTools unauthorized access and denial of service in SQR](https://junglewise.ai/threats/cve-2026-83019-oracle-peoplesoft-enterprise-peopletools-unauthorized-access-and) (high, CVSS 8.1, published 15 Sep 2026) ## Vulnerabilities per week 57 vulnerabilities in the last four weeks, up 418% on the four before (11). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 10 | 1 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 11 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 57 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities - [Oracle VirtualBox](https://junglewise.ai/threats/technologies/virtualbox): 86 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle PeopleSoft Enterprise PeopleTools vulnerabilities", https://junglewise.ai/threats/technologies/peopletools, 9 November 2026.