Threats affecting pkg:maven/com.oracle/peoplesoft-enterprise-peopletolls

CVE-2026-35273 is a critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62, specifically in the Updates Environment Management component. It allows an unauthenticated attacker to remotely exploit the system via HTTP without any user interaction, potentially leading to full takeover of the PeopleSoft Enterprise PeopleTools environment. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released a security alert recommending immediate application of mitigations and patches for supported versions.