Remote Access Vulnerability in PeopleSoft Enterprise FIN Payables by Oracle

CVE-2025-61762

What is CVE-2025-61762?

A vulnerability exists in the PeopleSoft Enterprise FIN Payables product of Oracle, specifically affecting version 9.2. This flaw can be exploited by a low-privileged attacker with network access through HTTP, potentially allowing unauthorized updates, insertions, or deletions of data. Additionally, it enables unauthorized read access to specific data sets within the system and has the potential to cause partial denial of service, impacting the availability of the application. Organizations using this version of PeopleSoft should take immediate steps to mitigate associated risks.

References