Oracle PeopleSoft Enterprise Human Capital Management Absence Management vulnerabilities

2 CVEs affecting Oracle PeopleSoft Enterprise Human Capital Management Absence Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-34266, published 2026-04-21.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-2947, published 2020-04-15. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable…
• CVE-2026-34266, published 2026-04-21. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable…