{"id":"CVE-2026-101411","kind":"vulnerability","aliases":["CVE-2026-101411"],"related":[],"title":"Oracle PeopleSoft PeopleTools: Business Interlink flaw allows unauthenticated takeover over HTTP","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).","summary":"Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 contain a flaw in the Business Interlink component. A difficult-to-exploit flaw lets an unauthenticated attacker on the network send HTTP requests and take over the PeopleTools system.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["enterprise-erp","oracle","peoplesoft","peopletools","self-hosted","vendor"],"not_affected_if":["no-network-exposure","other-peopletools-versions"],"how_to_check":"- Confirm whether PeopleTools is deployed and whether its version falls in `8.61` to `8.63`\n- Check whether Business Interlink is in use on the PeopleSoft web tier (unknown if the sources say how to confirm)","fix":"- Apply the Oracle Critical Patch Update fix for PeopleSoft Enterprise PeopleTools (the sources do not name the patched version or patch number)\n- Restrict HTTP access to the Business Interlink endpoints to trusted networks until patched","status":"open","published_at":"2026-10-20T22:17:49+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","triaged_at":"2026-10-25T03:06:31+00:00","updated_at":"2026-10-25T03:06:31+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T03:06:31Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Critical Patch Update fix for PeopleSoft Enterprise PeopleTools (the sources do not name the patched version or patch number)\n- Restrict HTTP access to the Business Interlink endpoints to trusted networks until patched","reach":"internet","title":"Oracle PeopleSoft PeopleTools: Business Interlink flaw allows unauthenticated takeover over HTTP","impact":"high","summary":"Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 contain a flaw in the Business Interlink component. A difficult-to-exploit flaw lets an unauthenticated attacker on the network send HTTP requests and take over the PeopleTools system.","category":"vendor","nicknames":[],"who_cares":["peoplesoft","peopletools","oracle","enterprise-erp","self-hosted"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker takes over the PeopleSoft PeopleTools system remotely","analyst_note":"Find Oracle's advisory and patch for PeopleTools 8.61-8.63 and confirm whether Business Interlink must be enabled for exposure; the sources give no fixed version or check steps.","how_to_check":"- Confirm whether PeopleTools is deployed and whether its version falls in `8.61` to `8.63`\n- Check whether Business Interlink is in use on the PeopleSoft web tier (unknown if the sources say how to confirm)","needs_analyst":true,"not_affected_if":["other-peopletools-versions","no-network-exposure"],"who_is_affected":"Organizations running Oracle PeopleSoft Enterprise PeopleTools in the supported versions 8.61 to 8.63 that expose the Business Interlink component over HTTP. Sites on other PeopleTools versions, or with no network path to the PeopleSoft web tier, are not indicated as affected by the sources.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000703,"input_tokens":3485,"output_tokens":709,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-101411':14A,17A '-2026':13A,16A '-8.63':86C '/av':131C '3.1':118C,130C '8.1':121C '8.61':33B,85C '8.63':35B 'access':96C 'affect':83C 'allow':7A,91C 'attack':53B,93C,105C 'avail':125C 'base':119C 'busi':4A,41B,77C 'compon':43B,76C 'compromis':100C 'confidenti':122C 'contain':36B 'cve':12A,15A 'cvss':117C,127C,129C 'difficult':46B,87C 'difficult-to-exploit':45B 'enterpris':19B,30B,70C,102C,115C 'enterprise-erp':18B 'erp':20B 'exploit':48B,89C 'flaw':6A,38B,49B 'h':139C 'h/a':138C 'h/i':137C 'h/pr':133C 'host':26B 'http':11A,58B,98C 'impact':126C 'integr':123C 'interlink':5A,42B,78C 'let':50B 'n/ac':132C 'n/s':135C 'n/ui':134C 'network':56B,95C 'oracl':1A,21B,28B,74C 'peoplesoft':2A,22B,29B,69C,75C,101C,114C 'peopletool':3A,23B,31B,64B,71C,103C,116C 'product':72C 'request':59B 'result':110C 'score':120C 'self':25B 'self-host':24B 'send':57B 'success':104C 'support':79C 'system':65B 'take':61B 'takeov':9A,112C 'u/c':136C 'unauthent':8A,52B,92C 'vector':128C 'vendor':27B 'version':32B,80C 'via':97C 'vulner':66C,90C,108C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle PeopleSoft Enterprise PeopleTools in the supported versions 8.61 to 8.63 that expose the Business Interlink component over HTTP. Sites on other PeopleTools versions, or with no network path to the PeopleSoft web tier, are not indicated as affected by the sources.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:49+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101411","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101411","severity":null,"published_at":"2026-10-20T22:17:49+00:00","modified_at":"2026-10-23T04:18:11+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}