Vulnerability in Oracle PeopleSoft Enterprise PeopleTools Affects Multiple Versions

CVE-2025-53063

What is CVE-2025-53063?

An improper access control vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.60, 8.61, and 8.62. This flaw allows low-privileged attackers with network access via HTTP to potentially exploit the system. While successful exploitation requires human interaction, it may lead to unauthorized updates, inserts, or deletions of accessible data within PeopleSoft Enterprise PeopleTools. Additionally, there is a risk of unauthorized read access to certain data sets, posing significant security implications across integrated products.

References