Dashboard / CVE-2026-101429

CVE-2026-101429

HIGH
MEDIUM Priority: 0.01 BB Relevance: 29/100
Published: 2026-10-20 Modified: 2026-10-27 First seen: 2026-10-29 Status: active

Attack Surface

No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: None
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
oracle peoplesoft_enterprise_peopletools 8.61 – 8.63
oracle peoplesoft_enterprise_peopletools 8.61 – 8.63

References & Advisories (1)

Bug Bounty Relevance

29 / 100
✓ No authentication

CVSS Score

7.0 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.14%
Raw Score 0.001380
Percentile 3.2%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00138
2026-10-28
0.00138

Intelligence Sources

mitre ref →
nvd ref →

External Links