Unauthorized Access Vulnerability in Oracle PeopleSoft Enterprise PeopleTools

CVE-2025-53065

What is CVE-2025-53065?

A vulnerability in Oracle's PeopleSoft Enterprise PeopleTools, specifically within the PIA Core Technology component, allows unauthenticated attackers with network access via HTTP to exploit the system. This flaw necessitates human interaction from a third party for exploitation. Successful exploitation can lead to unauthorized updates, inserts, or deletions of data, as well as unauthorized read access to certain data within PeopleSoft Enterprise PeopleTools. The affected versions include 8.60, 8.61, and 8.62, and the potential impact raises significant security concerns for organizations utilizing this product.

References