Skip to main content

Peoplesoft Enterprise Hcm Talent Acquisition Manager

2 CVEs product

Monthly

CVE-2026-61076 Jul 21, 22:18 CRITICAL Act Now

Full takeover of Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager 9.2 is achievable by a low-privileged, network-based attacker abusing the Job Opening component over HTTP. Because the flaw carries a scope change (S:C), successful attacks reach beyond the Talent Acquisition module and can significantly impact additional connected PeopleSoft products. No public exploit identified at time of analysis, but the 9.9 CVSS and trivial exploitability make this a top-priority patch from Oracle's July 2026 Critical Patch Update.

Privilege Escalation Oracle Peoplesoft Enterprise Hcm Talent Acquisition Manager
NVD VulDB
CVSS 3.1
9.9
EPSS
0.4%
CVE-2025-30713 Apr 15, 21:16 MEDIUM PATCH This Month

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Oracle Peoplesoft Enterprise Hcm Talent Acquisition Manager
NVD
CVSS 3.1
5.4
EPSS
0.1%
EPSS 0% CVSS 9.9
CRITICAL Act Now

Full takeover of Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager 9.2 is achievable by a low-privileged, network-based attacker abusing the Job Opening component over HTTP. Because the flaw carries a scope change (S:C), successful attacks reach beyond the Talent Acquisition module and can significantly impact additional connected PeopleSoft products. No public exploit identified at time of analysis, but the 9.9 CVSS and trivial exploitability make this a top-priority patch from Oracle's July 2026 Critical Patch Update.

Privilege Escalation Oracle Peoplesoft Enterprise Hcm Talent Acquisition Manager
NVD VulDB
EPSS 0% CVSS 5.4
MEDIUM PATCH This Month

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Oracle Peoplesoft Enterprise Hcm Talent Acquisition Manager
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy