PT-2026-62181 · Oracle · Peoplesoft Enterprise Peopletools

CVE-2026-47017 · Published 2026-07-21 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.62

Description A flaw in the Process Scheduler component allows a low-privileged attacker with network access via HTTP to compromise the system. The exploitation requires human interaction and can lead to a scope change, significantly impacting additional products. Successful attacks may result in unauthorized access, creation, deletion, or modification of critical data or all data accessible within PeopleSoft Enterprise PeopleTools.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-47017

Affected Products

Peoplesoft Enterprise Peopletools

References · 3

• https://oracle.com/security-alerts/cpujul2026.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47017 · Security Note
• https://t.me/cveNotify/210196 · Telegram Post