PT-2025-42945 · Oracle · Peoplesoft Enterprise Peopletools+1

Published 2025-10-21 · Updated 2025-10-21 · CVE-2025-53048

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62

Description A flaw exists within the Rich Text Editor component of Oracle PeopleSoft Enterprise PeopleTools. This issue allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation requires interaction from a user other than the attacker. Successful attacks can lead to unauthorized data modification, insertion, deletion, and read access to PeopleSoft Enterprise PeopleTools data.

Recommendations Update PeopleSoft Enterprise PeopleTools version 8.60 to a later version. Update PeopleSoft Enterprise PeopleTools version 8.61 to a later version. Update PeopleSoft Enterprise PeopleTools version 8.62 to a later version.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-15848

CVE-2025-53048

Affected Products

Peoplesoft

Peoplesoft Enterprise Peopletools

References · 5

• https://oracle.com/security-alerts/cpuoct2025.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53048 · Security Note
• https://bdu.fstec.ru/vul/2025-15848 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53048 · Vendor Advisory
• https://twitter.com/CVEnew/status/1980736626700742867 · Twitter Post