CVE-2019-3023: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet).

Security readout for executives and security teams

CVE-2019-3023 affects Oracle PeopleSoft PeopleTools stylesheet handling in supported versions 8.56 and 8.57. An unauthenticated attacker reachable over HTTP could cause unauthorized changes to some accessible PeopleTools data, but the attack requires a separate user's interaction. Business impact is mainly data integrity risk, not confirmed data theft or outage. Exposure is likely limited to organizations running Oracle PeopleSoft Enterprise PeopleTools 8.56 or 8.57 with HTTP access to the affected application. Internet-facing or broadly reachable PeopleSoft portals carry higher concern because no attacker authentication is required, though user interaction is still required. Prioritize remediation for internet-facing or business-critical PeopleSoft systems because the issue can alter application data without attacker authentication. The base score is moderate, but integrity impact in HR, finance, or operational PeopleSoft workflows can create meaningful business risk. Mitigation focus: Inventory PeopleSoft Enterprise PeopleTools versions and identify 8.56 or 8.57 deployments.; Review Oracle October 2019 Critical Patch Update guidance for the applicable PeopleTools fix.; Apply vendor-approved PeopleTools updates through normal change control..

Prepared

Jun 6, 2026, 12:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.