VDB

CVE-2026-35279

CVE-2026-35279 PUBLISHED CVSS 8.1 HIGH

Reported by oracle · Published June 16, 2026

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PT PeopleTools. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Risk Scores

CVSS 3.1
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Oracle CorporationPeopleSoft Enterprise PT PeopleTools8.61, 8.62
oraclepeoplesoft_enterprise_pt_peopletools
Oracle CorporationPeopleSoft Enterprise PT PeopleTools8.61, 8.62, 8.61

Timeline

  • Jun 16, 2026 CVE Published
  • Jun 17, 2026 EPSS Score
  • Jun 24, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›