CVE-2026-34280

CVE-2026-34280 is a vulnerability in Oracle PeopleSoft Enterprise HCM Human Resources product, specifically within the Job Profile Manager component affecting version 9.2. The flaw allows attackers with high privileges and network access to compromise the system and manipulate critical HR data. The vulnerability has a CVSS 3.1 base score of 6.5 (Medium severity) and is easily exploitable via HTTP by a high-privileged network-based attacker without requiring user interaction. Successful exploitation could enable unauthorized creation, deletion, or modification of critical HR data, as well as unauthorized access to sensitive employee information across the PeopleSoft Enterprise HCM system. There is no evidence of active exploitation at this time. The vulnerability is not included in CISA's Known Exploited Vulnerabilities catalog, has no publicly available exploit code, and community attention remains minimal based on the low EPSS score of 0.00026. However, organizations running PeopleSoft 9.2 should implement patches promptly given the potential for data integrity and confidentiality breaches.