PeopleSoft Enterprise PeopleTools Vulnerability in Oracle

CVE-2025-53055

What is CVE-2025-53055?

This vulnerability in Oracle's PeopleSoft Enterprise PeopleTools affects supported versions 8.60, 8.61, and 8.62, allowing an unauthenticated attacker to gain unauthorized HTTP access. Successful exploitation can lead to unauthorized updates, insertion or deletion of data, along with unauthorized read access to sensitive information. The attack requires interaction from a user other than the attacker, complicating the attack vector. While centered in PeopleSoft Enterprise PeopleTools, these vulnerabilities can also have broader implications for related products, making it essential for organizations to address this issue promptly.

References