PT-2025-42983 · Oracle · Peoplesoft Enterprise Fin Payables

Publicado 2025-10-21 · Atualizado 2025-10-22 · CVE-2025-61762

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 9.2

Description A flaw exists within the PeopleSoft Enterprise FIN Payables component that could allow a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation may lead to unauthorized data modification, insertion, or deletion, as well as unauthorized read access to certain data and a partial denial of service.

Recommendations Update PeopleSoft Enterprise FIN Payables to a version beyond 9.2.

Correção

DoS

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2025-61762

Produtos afetados

Peoplesoft Enterprise Fin Payables

Referências · 6

• https://twitter.com/CVEnew/status/1980736591539892574 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-61762 · Nota de Segurança
• https://oracle.com/security-alerts/cpuoct2025.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-61762 · Aviso do Fabricante
• https://t.me/CVEtracker/35421 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1980813665159794689 · Publicação no Twitter