Vulnerability in PeopleSoft Enterprise PeopleTools Product by Oracle

CVE-2025-61750

What is CVE-2025-61750?

A vulnerability exists in Oracle's PeopleSoft Enterprise PeopleTools, specifically within the Query component, that can be exploited by a low-privileged attacker with network access via HTTP. The affected versions include 8.61 and 8.62. Successful exploitation may grant unauthorized read access to certain data within the PeopleSoft Enterprise system, posing significant risks to data confidentiality. It is critical for organizations using these versions to assess their security measures and apply necessary updates to mitigate potential threats.

References