PT-2025-42958 · Oracle · Peoplesoft Enterprise Peopletools+1

Published 2025-10-21 · Updated 2025-10-21 · CVE-2025-53061

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62

Description A security issue exists within the PeopleSoft Enterprise PeopleTools product, specifically in the PIA Core Technology component. A high-privileged attacker with network access via HTTP can compromise the system. Successful exploitation may lead to unauthorized data modification, insertion, or deletion, as well as unauthorized read access to certain data within PeopleSoft Enterprise PeopleTools. This could significantly impact additional products.

Recommendations Update PeopleSoft Enterprise PeopleTools version 8.60 to a later version. Update PeopleSoft Enterprise PeopleTools version 8.61 to a later version. Update PeopleSoft Enterprise PeopleTools version 8.62 to a later version.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-15922

CVE-2025-53061

Affected Products

Peoplesoft

Peoplesoft Enterprise Peopletools

References · 5

• https://oracle.com/security-alerts/cpuoct2025.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53061 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53061 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15922 · Security Note
• https://twitter.com/CVEnew/status/1980736614797390055 · Twitter Post