PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-47026 Oracle Corporation CVE debrief

A vulnerability was discovered in PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). The affected versions are 8.61 and 8.62. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products (scope change). The vulnerability has a high CVSS score, indicating a high severity level.

Vendor
Oracle Corporation
Product
PeopleSoft Enterprise PeopleTools
CVSS
HIGH 7.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-21
Original CVE updated
2026-07-27
Advisory published
2026-07-21
Advisory updated
2026-07-27

Who should care

Organizations using PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 should prioritize patching this vulnerability to prevent potential unauthorized access to critical data. This is a high-priority concern due to the potential for significant impact and the ease of exploitation. IT teams and security personnel responsible for managing PeopleSoft Enterprise PeopleTools installations should take immediate action to mitigate this vulnerability.

Technical summary

The vulnerability has a CVSS 3.1 Base Score of 7.4 (Confidentiality impacts) and a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N). Successful attacks can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. The affected versions are 8.61 and 8.62 of PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards).

Defensive priority

High priority due to the potential for significant impact and the ease of exploitation.

Recommended defensive actions

  • Apply the patches provided by Oracle as soon as possible.
  • Implement compensating controls such as monitoring and exception tracking.
  • Verify the integrity of PeopleSoft Enterprise PeopleTools installations.
  • Restrict network access to PeopleSoft Enterprise PeopleTools.
  • Educate users about the risks associated with this vulnerability.
  • Review relevant monitoring, detection, and logs for exposed assets that need extra review.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record was published on 2026-07-21T22:17:08.137Z and was last modified on 2026-07-27T19:35:35.253Z. The NVD entry is currently Analyzed. This information is based on the provided source corpus and may not reflect the full scope of the vulnerability. Further verification is recommended to ensure accurate understanding of the vulnerability's impact.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:08.137Z and has not been modified since then. The NVD entry is currently Analyzed.