{"id":"CVE-2026-101390","kind":"vulnerability","aliases":["CVE-2026-101390"],"related":[],"title":"Oracle PeopleSoft PeopleTools: Business Interlink flaw allows unauthenticated server takeover","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).","summary":"A flaw in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools can be triggered over HTTP by an unauthenticated attacker with network access. Successful exploitation can lead to full takeover of the PeopleTools installation.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["enterprise-erp","oracle","peoplesoft","peopletools","self-hosted","vendor"],"not_affected_if":["not-network-exposed","unsupported-version"],"how_to_check":"- Check the installed PeopleTools release against the affected range 8.61 to 8.63 in the PeopleTools version information\n- Confirm whether Business Interlink is deployed and reachable over HTTP\n- unknown for any further check the sources do not describe","fix":"- Apply the Oracle Critical Patch Update for PeopleSoft Enterprise PeopleTools covering Business Interlink, for supported versions 8.61 to 8.63\n- unknown for the specific patch identifier, since the sources do not name one","status":"open","published_at":"2026-10-20T22:17:46+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","triaged_at":"2026-10-25T03:06:33+00:00","updated_at":"2026-10-25T03:06:33+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T03:06:33Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Critical Patch Update for PeopleSoft Enterprise PeopleTools covering Business Interlink, for supported versions 8.61 to 8.63\n- unknown for the specific patch identifier, since the sources do not name one","reach":"network","title":"Oracle PeopleSoft PeopleTools: Business Interlink flaw allows unauthenticated server takeover","impact":"high","summary":"A flaw in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools can be triggered over HTTP by an unauthenticated attacker with network access. Successful exploitation can lead to full takeover of the PeopleTools installation.","category":"vendor","nicknames":[],"who_cares":["peoplesoft","peopletools","oracle","self-hosted","enterprise-erp"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker takes over the PeopleTools server over the network","analyst_note":"Find Oracle's Critical Patch Update advisory and the exact patch and Business Interlink configuration details; sources only give the NVD record.","how_to_check":"- Check the installed PeopleTools release against the affected range 8.61 to 8.63 in the PeopleTools version information\n- Confirm whether Business Interlink is deployed and reachable over HTTP\n- unknown for any further check the sources do not describe","needs_analyst":true,"not_affected_if":["unsupported-version","not-network-exposed"],"who_is_affected":"Organizations running Oracle PeopleSoft Enterprise PeopleTools in the affected 8.61 to 8.63 supported versions with Business Interlink reachable over HTTP from the network. The sources describe the exploit as difficult, so exposure depends on how the service is reached. Installations not on the affected versions, or not exposing Business Interlink to the network, can likely skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000692,"input_tokens":3485,"output_tokens":686,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-101390':13A,16A '-2026':12A,15A '-8.63':82C '/av':127C '3.1':114C,126C '8.1':117C '8.61':81C 'access':50B,92C 'affect':79C 'allow':7A,87C 'attack':47B,89C,101C 'avail':121C 'base':115C 'busi':4A,31B,73C 'compon':33B,72C 'compromis':96C 'confidenti':118C 'cve':11A,14A 'cvss':113C,123C,125C 'difficult':83C 'enterpris':18B,37B,66C,98C,111C 'enterprise-erp':17B 'erp':19B 'exploit':52B,85C 'flaw':6A,28B 'full':56B 'h':135C 'h/a':134C 'h/i':133C 'h/pr':129C 'host':25B 'http':43B,94C 'impact':122C 'instal':61B 'integr':119C 'interlink':5A,32B,74C 'lead':54B 'n/ac':128C 'n/s':131C 'n/ui':130C 'network':49B,91C 'oracl':1A,20B,35B,70C 'peoplesoft':2A,21B,36B,65C,71C,97C,110C 'peopletool':3A,22B,38B,60B,67C,99C,112C 'product':68C 'result':106C 'score':116C 'self':24B 'self-host':23B 'server':9A 'success':51B,100C 'support':75C 'takeov':10A,57B,108C 'trigger':41B 'u/c':132C 'unauthent':8A,46B,88C 'vector':124C 'vendor':26B 'version':76C 'via':93C 'vulner':62C,86C,104C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle PeopleSoft Enterprise PeopleTools in the affected 8.61 to 8.63 supported versions with Business Interlink reachable over HTTP from the network. The sources describe the exploit as difficult, so exposure depends on how the service is reached. Installations not on the affected versions, or not exposing Business Interlink to the network, can likely skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101390","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101390","severity":null,"published_at":"2026-10-20T22:17:46+00:00","modified_at":"2026-10-23T04:18:07+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}