VDB

CVE-2026-35272

CVE-2026-35272 PUBLISHED CVSS 8.4 HIGH

Reported by oracle · Published June 16, 2026

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PT PeopleTools executes to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PT PeopleTools. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Risk Scores

CVSS 3.1
8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Oracle CorporationPeopleSoft Enterprise PT PeopleTools8.61, 8.62
oraclepeoplesoft_enterprise_pt_peopletools
Oracle CorporationPeopleSoft Enterprise PT PeopleTools8.61, 8.62, 8.61

Timeline

  • Jun 16, 2026 CVE Published
  • Jun 17, 2026 EPSS Score
  • Jun 24, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›