CVE-2026-101432

Analyzed Analyzed - Analysis Complete

PeopleSoft Enterprise PeopleTools Privilege Escalation

Publication date: 2026-10-20

Last updated on: 2026-10-30

Assigner: Oracle

Description

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-30

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-101432

EUVD

EUVD-2026-105848

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	peoplesoft_enterprise_peopletools	From 8.61 (inc) to 8.63 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63. It allows a low-privileged attacker with system access to exploit the Test Framework component and compromise the software. The attacker could gain unauthorized access to data, modify or delete it, and cause partial denial of service.

Detection Guidance

This vulnerability affects Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63. Detection requires checking the installed version of PeopleSoft Enterprise PeopleTools on your system. Compare the version against the affected range (8.61-8.63). If your version falls within this range, the system is potentially vulnerable.

Impact Analysis

If you use PeopleSoft Enterprise PeopleTools versions 8.61-8.63, an attacker with local access could steal, alter, or delete sensitive data. They could also disrupt system operations, leading to downtime or data corruption.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR (data protection) and HIPAA (health data privacy) requirements. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update (CPU) for PeopleSoft Enterprise PeopleTools versions 8.61-8.63 to address the vulnerability. Ensure proper access controls are enforced for low-privileged users to limit unauthorized access to the Test Framework component.

Hi! I’m here to help you understand CVE-2026-101432. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...