Live › vulnerability › CVE-2026-60500
Go to dashboardOracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 have a flaw in the Web Server component. A remote, unauthenticated attacker can send HTTP requests to gain read access to a subset of data the product can reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organisations running Oracle PeopleSoft Enterprise PeopleTools 8.61 through 8.63 with the Web Server component reachable over HTTP. The sources do not describe which deployment settings make it exposed, so the exact exposure is unknown. Teams on other PeopleTools releases are not in the listed range.
No product ranges from the sources yet.
unknown if the sources do not say how to read itEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-60500")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.