CVE-2026-47048 Oracle Corporation CVE debrief

Who should care

Administrators and users of PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 should apply patches to prevent exploitation. Additionally, security teams and vulnerability management teams should review the vulnerability and implement compensating controls for exposed systems while remediation is scheduled and verified.

Technical summary

A vulnerability in PeopleSoft Enterprise PeopleTools allows a low-privileged attacker with network access via HTTP to compromise the system. The vulnerability affects versions 8.61 and 8.62 of PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction and can result in unauthorized update, insert, or delete access to some accessible data, as well as unauthorized read access to a subset of accessible data. The vulnerability has a CVSS score of 5.4, indicating a medium severity vulnerability.

Defensive priority

Medium priority due to the CVSS score of 5.4 and the potential impact on confidentiality and integrity.

Recommended defensive actions

• Apply patches provided by Oracle to PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62.
• Restrict network access to PeopleSoft Enterprise PeopleTools to only trusted users and systems.
• Monitor system logs for suspicious activity.
• Implement additional security controls, such as multi-factor authentication and intrusion detection systems.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD detail provide information on the vulnerability, its impact, and affected versions. Oracle's security alert provides mitigation and patch information. The vulnerability affects PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62, and a low-privileged attacker with network access via HTTP can compromise the system. Successful attacks require human interaction and can result in unauthorized update, insert, or delete access to some accessible data, as well as unauthorized read access to a subset of accessible data. To verify, defenders should review system logs for suspicious activity and implement additional security controls such as multi-factor authentication and intrusion detection systems.

Official resources