PeopleSoft Enterprise PeopleTools vulnerabilities | LiveThreat CVE Feed

Product

PeopleSoft Enterprise PeopleTools

by Oracle · last CVE Oct 20, 2026

On CISA KEVExploited in the wildRansomware-linked

428

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities428 In the news9 Timeline

Severity mix

Critical 18High 110Medium 255Low 17

Severity

All severities428 Critical18 High110 Medium255 Low17

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add PeopleSoft Enterprise PeopleTools to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-60814	3.9	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink) Affected: 8.61 through 8.63
CVE-2026-60887	3.8	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover) Affected: 8.61 through 8.63
CVE-2026-87416	3.7	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) Affected: 8.61 through 8.63
CVE-2026-87340	3.7	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61 through 8.63
CVE-2026-60819	3.7	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE) Affected: 8.61 through 8.63
CVE-2021-22924	3.7	6%	Aug 5	libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching… Affected: 8.57; 8.58; 8.59
CVE-2020-8284	3.7	4%	Dec 14	A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract… Affected: 8.58
CVE-2020-1968	3.7	5%	Sep 9	The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a… Affected: 8.56; 8.57; 8.58
CVE-2020-9488	3.7	8%	Apr 27	Improper validation of certificate with host mismatch in Apache Log4j SMTP appender Affected: 8.56; 8.57; 8.58
CVE-2026-87401	3.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher) Affected: 8.61 through 8.63
CVE-2020-8908	3.3	1%	Dec 10	A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory… Affected: 8.57; 8.58; 8.59
CVE-2026-83373	3.0	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61 through 8.63
CVE-2026-87412	2.7	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) Affected: 8.61 through 8.63
CVE-2020-14847	2.7	1%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query) Affected: 8.56; 8.57; 8.58
CVE-2020-14564	2.7	1%	Jul 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Environment Mgmt Console) Affected: 8.56; 8.57; 8.58
CVE-2026-87418	2.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt) Affected: 8.61 through 8.63
CVE-2026-60964	1.9	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query) Affected: 8.61; 8.62