Unauthenticated Access Vulnerability in Oracle PeopleSoft Enterprise PeopleTools

CVE-2025-30747

What is CVE-2025-30747?

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools, affecting versions 8.60, 8.61, and 8.62. This issue allows an unauthenticated attacker with network access over HTTP to potentially compromise the system. Successful exploitation of this vulnerability necessitates human interaction from a user other than the attacker. If the attack is successful, it can lead to unauthorized read access to sensitive data within the PeopleSoft application. Organizations are advised to review their security protocols and consider implementing corrective measures to mitigate risks associated with this vulnerability.

References