Vulnerabilities ›

CVE-2026-34269

Medium

                    Published: Apr 21, 2026                      ·  Modified: Apr 22, 2026                      ·  Source: NVD                

CVSS v3

6.1

🔗 NVD Official

📄 Description (English)

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

🤖 AI Executive Summary

A medium-severity vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal (versions 8.61-8.62) allows unauthenticated network attackers to compromise data confidentiality and integrity through HTTP. The vulnerability requires user interaction and can impact additional connected systems beyond PeopleSoft itself.

📄 Description (Arabic)

تؤثر هذه الثغرة على مكون البوابة في PeopleSoft Enterprise PeopleTools الإصدارات 8.61-8.62 وتسمح بالوصول غير المصرح به للبيانات. يمكن للمهاجمين استغلال الثغرة عبر HTTP دون الحاجة إلى بيانات اعتماد، لكن يتطلب الاستغلال تفاعل المستخدم.

🤖 ملخص تنفيذي (AI)

ثغرة متوسطة الخطورة في بوابة Oracle PeopleSoft Enterprise PeopleTools تسمح للمهاجمين غير المصرحين بالوصول إلى الشبكة بالتأثير على سرية وسلامة البيانات. تتطلب الثغرة تفاعل المستخدم وقد تؤثر على الأنظمة الأخرى المتصلة بـ PeopleSoft.

🤖 AI Intelligence Analysis Analyzed: May 24, 2026 09:50

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

banking government healthcare

🎯 MITRE ATT&CK Techniques

T1190 T1566 T1598 T1110 T1078

⚖️ Saudi Risk Score (AI)

6.0

/ 10.0

🔧 Remediation Steps (English)

Immediately upgrade PeopleSoft Enterprise PeopleTools to versions beyond 8.62 or apply available security patches from Oracle. Implement network segmentation to restrict HTTP access to PeopleTools Portal, enforce strong authentication mechanisms, conduct user security awareness training to prevent social engineering attacks, and monitor Portal access logs for suspicious activities.

🔧 خطوات المعالجة (العربية)

قم بترقية PeopleSoft Enterprise PeopleTools إلى إصدارات أحدث من 8.62 أو تطبيق التصحيحات الأمنية من Oracle فوراً. طبق تقسيم الشبكة لتقييد الوصول إلى بوابة PeopleTools، وفرض آليات المصادقة القوية، وإجراء تدريب الوعي الأمني للمستخدمين، ومراقبة سجلات الوصول للكشف عن الأنشطة المريبة.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

A.7.1.1 A.7.1.2 A.9.2.1 A.12.4.1

🔵 SAMA CSF

ID.AM-2 PR.AC-1 PR.AC-3 DE.CM-1

🟡 ISO 27001:2022

A.6.1.1 A.7.1.1 A.7.1.2 A.9.2.1 A.12.4.1 A.13.1.1

🔗 References & Sources 1

🔗

https://www.oracle.com/security-alerts/cpuapr2026.html

secalert_us@oracle.com

📊 CVSS Score

6.1

/ 10.0 — Medium

📊 CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack VectorN — None / Network

Attack ComplexityL — Low / Local

Privileges RequiredN — None / Network

User InteractionR — Required

ScopeC — Changed

ConfidentialityL — Low / Local

IntegrityL — Low / Local

AvailabilityN — None / Network

📋 Quick Facts

Severity Medium

CVSS Score6.1

EPSS0.03%

Exploit No

Patch ✗ No

Published 2026-04-21

Source Feed nvd

🇸🇦 Saudi Risk Score

6.0

/ 10.0 — Saudi Risk

Priority: MEDIUM

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2026-34269

Introduce Yourself

Sign In Required