CVE-2026-101413
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
51/100
Published: 2026-10-20
Modified: 2026-11-05
First seen: 2026-11-03
Status: active
Attack Surface
Network
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| Oracle Corporation | PeopleSoft Enterprise PeopleTools | 8.61 |
| oracle | peoplesoft_enterprise_peopletools | 8.61 – 8.63 |
References & Advisories (1)
Vendor Advisory