VDB

CVE-2026-35289

CVE-2026-35289 PUBLISHED CVSS 8.1 HIGH

Reported by oracle · Published June 16, 2026

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PT PeopleTools. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Risk Scores

CVSS 3.1
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Oracle CorporationPeopleSoft Enterprise PT PeopleTools8.61, 8.62
Oracle CorporationPeopleSoft Enterprise PT PeopleTools8.61, 8.61, 8.62
oraclepeoplesoft_enterprise_pt_peopletools

Timeline

  • Jun 16, 2026 CVE Published
  • Jun 17, 2026 EPSS Score
  • Jun 24, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›