## Summary
CVE-2026-83070 is a vulnerability in Oracle PeopleSoft Enterprise PRTL Interaction Hub (component: Enterprise Portal) affecting the supported version 9.1. It is described as easily exploitable for a low-privileged attacker with network access via HTTP, potentially leading to unauthorized access to critical data or complete access to accessible hub data.
## Technical Details
- Affected component: PeopleSoft Enterprise PRTL Interaction Hub (component: Enterprise Portal).
- Attack vector: HTTP over the network (AV:N).
- Privileges required: PR:L (low privileged attacker).
- User interaction: UI:N (no user interaction required).
- Impact scope: S:C (scope changed), indicating compromise may extend beyond the vulnerable component.
- Primary consequence: C:H (high confidentiality impact); integrity and availability impacts are described as I:N and A:N.
## Affected
- Oracle PeopleSoft Enterprise PRTL Interaction Hub / Enterprise Portal
- Version: 9.1 (supported affected version)
## Impact
- Unauthorized access to critical data within Enterprise PRTL Interaction Hub.
- Potential complete access to all Enterprise PRTL Interaction Hub accessible data.
- Scope change (S:C) suggests attacks may significantly impact additional PeopleSoft products.
## Mitigation
1. Apply the vendor’s security update/patch for PeopleSoft Enterprise PRTL Interaction Hub 9.1 as soon as available.
2. Restrict HTTP network exposure to the minimum required (e.g., limit inbound access to trusted networks/hosts).
3. Review PeopleSoft portal access controls and monitor for anomalous access patterns from low-privileged accounts.
4. Validate remediation by confirming the vulnerable behavior is no longer present in the Enterprise Portal/Interaction Hub deployment.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N