CVE-2026-47024 Oracle Corporation CVE debrief

Who should care

Security teams and administrators responsible for PeopleSoft Enterprise PeopleTools should prioritize patching this vulnerability to prevent potential data breaches. This is because the vulnerability can be exploited with low privileges and requires minimal user interaction, making it a significant risk to affected systems.

Technical summary

The vulnerability is located in the Panel Processor component of PeopleSoft Enterprise PeopleTools 8.62. It has a CVSS 3.1 Base Score of 5.4, indicating a medium severity level. The CVSS Vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, showing that the vulnerability can be exploited over the network with low privileges and requires user interaction. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data.

Defensive priority

Apply patches immediately, as this vulnerability can be exploited with low privileges and requires minimal user interaction. Restrict network access and monitor for suspicious activity if patching is not immediate.

Recommended defensive actions

• Apply the latest security patches for PeopleSoft Enterprise PeopleTools 8.62
• Restrict network access to PeopleSoft Enterprise PeopleTools
• Monitor for suspicious activity and implement compensating controls if patching is not immediate
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record was published on 2026-07-21T22:17:08.020Z and was last modified on 2026-07-27T19:36:05.697Z. The NVD entry is currently Analyzed. This information is based on the NVD entry and the CVE record. The vulnerability affects PeopleSoft Enterprise PeopleTools 8.62, and its CVSS 3.1 Base Score is 5.4, indicating a medium severity level. The CVSS Vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N. The vulnerability can be exploited over the network with low privileges and requires user interaction.

Official resources