Vulnerability in Oracle PeopleSoft's Work Order Management Component

CVE-2025-61761

What is CVE-2025-61761?

A vulnerability exists in the Work Order Management component of Oracle PeopleSoft Enterprise FIN Maintenance Management, affecting version 9.2. This flaw allows a low privileged attacker with network access through HTTP to exploit the system. Attackers can potentially gain unauthorized access to update, insert, or delete data within the PeopleSoft system, as well as obtain unauthorized read access to certain datasets. This exposes sensitive information and compromises both confidentiality and integrity within the application.

References