CVE-2026-87345 Oracle Corporation CVE debrief

Who should care

Defenders responsible for PeopleSoft Enterprise PeopleTools, including vulnerability management teams, security teams, and operators of affected versions 8.61-8.63, should verify exposure and assess potential impact to prevent unauthorized data access and disruption of business operations. This includes IT security personnel, system administrators, and compliance teams who need to ensure the security and integrity of PeopleSoft Enterprise PeopleTools in

Why it matters

CVE-2026-87345 is a medium-severity vulnerability in Oracle PeopleSoft Enterprise PeopleTools that requires verification of exposure and assessment of potential impact to prevent unauthorized data access and disruption of business operations.

• Potential unauthorized data access
• Possible disruption of business operations
• Need for verification of exposure and impact

Technical summary

The vulnerability is in the Business Interlink component of PeopleSoft Enterprise PeopleTools. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, which requires human interaction from another person. Successful attacks can lead to unauthorized updates, inserts, or deletes of some PeopleSoft Enterprise PeopleTools accessible data, as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data.

Defensive priority

Defenders should prioritize verifying exposure of PeopleSoft Enterprise PeopleTools versions 8.61-8.63 and assessing the potential impact of unauthorized data access.

Recommended defensive actions

• Verify exposure of PeopleSoft Enterprise PeopleTools versions 8.61-8.63
• Assess potential impact of unauthorized data access
• Implement compensating controls to prevent unauthorized data access
• Review relevant monitoring, detection, and logs for exposed assets
• Track exceptions and retest remediated assets
• Plan vendor-supported updates through normal change control
• Confirm affected product deployments exist in managed environments

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, its impact, and affected versions. Defenders should verify exposure of PeopleSoft Enterprise PeopleTools versions 8.61-8.63 and assess potential impact. Evidence from the CVE Program and NVD detail page indicates a medium-severity vulnerability requiring human interaction for exploitation. The vulnerability affects PeopleSoft Enterprise PeopleTools versions 8.61-8.63, and successful attacks can lead to unauthorized updates, inserts, or deletes,

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.