• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    External POST Request to Sensitive Oracle PeopleSoft Endpoints

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Daniel Jeremiah@daniyyell
    •updated Jun 19, 2026•0•0•3

    Detects external HTTP POST requests to the Oracle PeopleSoft Environment Management Hub or Integration Broker listening connector. This activity could indicate an attempt to exploit public-facing Oracle PeopleSoft applications.

    Microsoft Sentinel (KQL)

    Tags

    T1190 - Exploit Public-Facing ApplicationTA0001 - Initial AccessHTTP RequestExploit AttemptNetwork GenericOracle DbAzure Sentinelkql

    Found in

    • UNC6240 ShinyHunters Mass Exploitation of Oracle PeopleSoft CVE-2026-35273Last updated Sep 27, 2026
    • UNC6240 ShinyHunters Mass Exploitation of Oracle PeopleSoft CVE-2026-35273Last updated Sep 27, 2026
    • UNC6240 ShinyHunters Mass Exploitation of Oracle PeopleSoft CVE-2026-35273Last updated Sep 27, 2026
    • UNC6240 ShinyHunters Mass Exploitation of Oracle PeopleSoft CVE-2026-35273Last updated Sep 27, 2026
    • UNC6240 ShinyHunters Mass Exploitation of Oracle PeopleSoft CVE-2026-35273Last updated Sep 27, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?