Vulnerability in PeopleSoft Enterprise CC Common Application Objects by Oracle
CVE-2025-30735

8.1HIGH

Key Information:

Vendor
Oracle
Status
Peoplesoft Enterprise Cc Common Application Objects
Vendor
CVE Published:
15 April 2025

Summary

A security vulnerability exists in Oracle's PeopleSoft Enterprise CC Common Application Objects that allows a low-privileged attacker with network access through HTTP to manipulate critical data. The flaw facilitates unauthorized actions, including the creation, deletion, or alteration of data within the PeopleSoft environment, posing significant risks to data integrity and confidentiality. Attackers exploiting this vulnerability can gain full access to sensitive data, potentially leading to severe operational disruptions.

Affected Version(s)

PeopleSoft Enterprise CC Common Application Objects 9.2

References

https://www.oracle.com/security-alerts/cpuapr2025.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-30735 : Vulnerability in PeopleSoft Enterprise CC Common Application Objects by Oracle | SecurityVulnerability.io