CVE-2026-21934

5 documents5 sources
Severity
5.4MEDIUM
EPSS
0.0%
top 89.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Peoplesoft Enterprise PeopletoolsOracle Peoplesoft Enterprise Peopletools
Timeline
PublishedJan 20
Latest updateJan 21

Description

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unautho…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.5

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-jm72-q689-gvmx: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications)↗2026-01-21
▶
CVEList
CVE-2026-21934: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications)↗2026-01-20
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle PeopleSoft Risk Matrix: Push Notifications — CVE-2026-21934↗2026-01-15
▶

🕵️Threat Intelligence

1
Wiz
CVE-2026-21934 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶