Threats affecting pkg:maven/com.oracle.peoplesoft/peoplestools

CVE-2026-47048 is a medium severity vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62. It allows a low privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data, as well as unauthorized read access to some data. Successful exploitation requires user interaction from a person other than the attacker and may impact additional Oracle products beyond PeopleTools. The vulnerability has a CVSS 3.1 base score of 5.4, reflecting limited confidentiality and integrity impacts without availability impact. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for these versions in the provided content.