CVE-2026-101433

mediumpriority · track · 21EPSS 0.003 · 24 %ileDEFRNLUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.32% (24th) EPSS

CVSS 5.3 · medium

Is it mine?

6 products

Check your exposure

Who says so?

3 sources

cert_bund · ncsc_nl · certfr

EPSS · scored 2026-10-28

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

cvss

Technical severity, 0–10. One row per scoring source.

5.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nprimary · secalert_us@oracle.com USexploitability 3.9 · impact 1.4

v3.14.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · NCSC-NL NL

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USLLM-inferred

affected products (6)

Products and version ranges known to be affected.

Oracle PeopleSoft 8.61all versionscert_bundDEcpe:/a:oracle:peoplesoft:8.61
Oracle PeopleSoft 8.61-8.63all versionscert_bundDEcpe:/a:oracle:peoplesoft:8.61-8.63
Oracle PeopleSoft 8.62all versionscert_bundDEcpe:/a:oracle:peoplesoft:8.62
Oracle PeopleSoft 9.1all versionscert_bundDEcpe:/a:oracle:peoplesoft:9.1
Oracle PeopleSoft 9.2all versionscert_bundDEcpe:/a:oracle:peoplesoft:9.2
Oracle Peoplesoft Enterprise Peopletools≤ vers:unknown/*ncsc_nlNL

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2026-0439Kwetsbaarheden verholpen in Oracle PeopleSoft Enterprise NL2026-10-21csaf · ncsc_nlNL
Oracle heeft nieuwe kwetsbaarheden verholpen in Oracle PeopleSoft Enterprise.
WID-SEC-W-2026-4082Oracle PeopleSoft: Mehrere SchwachstellenDeutsch2026-10-20csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle PeopleSoft ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
CERTFR-2026-AVI-1352Multiples vulnérabilités dans Oracle PeopleSoftFrançais2026-10-21vendor · certfrFR

sources

Which sources assert this record, and when.

cert_bund ncsc_nl certfr NVD CVE.org MITRE

published 2026-10-20modified 2026-10-21

references (1) nvd

External citations — patches, advisories, analysis.

https://www.oracle.com/security-alerts/cpuoct2026.html

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan