CVE-2026-87340 Oracle Corporation CVE debrief

Who should care

Defenders responsible for PeopleSoft Enterprise PeopleTools instances, particularly those using versions 8.61-8.63, should assess exposure and prioritize patching or mitigating this vulnerability.

Why it matters

CVE-2026-87340 is a low-severity vulnerability in PeopleSoft Enterprise PeopleTools that allows unauthenticated attackers to potentially update data. Defenders should assess exposure, particularly for versions 8.61-8.63, and prioritize patching or mitigation.

• Potential unauthorized data updates in PeopleSoft Enterprise PeopleTools.
• Need to verify exposure of instances, especially versions 8.61-8.63.
• Requires patching or mitigation to prevent unauthorized access.
• Monitoring for unusual data modifications is necessary.

Technical summary

This vulnerability in PeopleSoft Enterprise PeopleTools allows unauthenticated attackers with network access via HTTP to compromise the product. Successful attacks can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. The CVSS 3.1 Base Score is 3.7 (Integrity impacts). The vulnerability affects versions 8.61-8.63 of PeopleSoft Enterprise PeopleTools and has a low severity impact on integrity. Defenders should assess exposure and prioritize patching or mitigation.

Defensive priority

Assess exposure of PeopleSoft Enterprise PeopleTools instances, particularly versions 8.61-8.63, and prioritize patching or mitigating this vulnerability.

Recommended defensive actions

• Inventory PeopleSoft Enterprise PeopleTools instances to identify potentially affected versions 8.61-8.63.
• Prioritize patching or applying mitigations for this vulnerability in affected instances.
• Monitor for unusual data updates or modifications in PeopleSoft Enterprise PeopleTools data.
• Verify network access controls and HTTP security measures are in place.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE and NVD records provide details on this vulnerability in PeopleSoft Enterprise PeopleTools. Oracle's advisory also discusses this issue. The vulnerability affects versions 8.61-8.63 of PeopleSoft Enterprise PeopleTools. Defenders should verify exposure and review official advisories for affected scope and severity. The CVE record was published on 2026-10-20T22:20:11.687Z and has not been modified since then. The NVD record provides additional details on the vulnerability assessment.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.