VDB

CVE-2026-91264

CVE-2026-91264 PUBLISHED CVSS 3.7 LOW

Reported by oracle · Published October 20, 2026

Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Manufacturing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM Manufacturing accessible data. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Risk Scores

CVSS 3.1
3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersions
Oracle CorporationPeopleSoft Enterprise SCM Manufacturing9.2
oraclepeoplesoft_enterprise_scm_manufacturing
Oracle CorporationPeopleSoft Enterprise SCM Manufacturing9.2

Timeline

  • Oct 20, 2026 CVE Published
  • Oct 21, 2026 EPSS Score
  • Oct 21, 2026 Coalition ESS Score
  • Oct 25, 2026 EPSS Score
  • Oct 28, 2026 CVE Updated
  • Oct 29, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›