Vulnerability in Oracle PeopleSoft Enterprise FIN eSettlements Product

CVE-2025-21539

What is CVE-2025-21539?

A security issue exists in Oracle's PeopleSoft Enterprise FIN eSettlements product. This vulnerability is easily exploitable, permitting a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized updates, insertions, and deletions of data, along with unauthorized reading of sensitive information within PeopleSoft Enterprise FIN eSettlements. Organizations using the affected version, 9.2, should take prompt action to secure their systems against this threat.

References