Vulnerabilities

TI-2026-17651 CVE-2026-21951 · GHSA-2898-f79g-hh47

Cross-site scripting in Oracle PeopleSoft Enterprise PeopleTools

LOW 27

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00244 Published 2026-01-20 No fix listed CWE-79

TI-2026-17638 CVE-2026-21938 · GHSA-f8c6-q94w-2f64

LOW 27

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00244 Published 2026-01-20 No fix listed

TI-2026-17634 CVE-2026-21934 · GHSA-jm72-q689-gvmx

LOW 24

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00237 Published 2026-01-20 No fix listed