PT-2025-42962 · Oracle · Peoplesoft Enterprise Peopletools+1

Published 2025-10-21 · Updated 2025-10-21 · CVE-2025-53065

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62

Description An easily exploitable issue exists in the PeopleSoft Enterprise PeopleTools product, specifically within the PIA Core Technology component. An unauthenticated attacker with network access via HTTP can compromise PeopleSoft Enterprise PeopleTools. Successful exploitation requires interaction from a user other than the attacker and can lead to unauthorized data modification, insertion, deletion, or reading of accessible data.

Recommendations Update PeopleSoft Enterprise PeopleTools version 8.60 to a later version. Update PeopleSoft Enterprise PeopleTools version 8.61 to a later version. Update PeopleSoft Enterprise PeopleTools version 8.62 to a later version.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-15923

CVE-2025-53065

Affected Products

Pia Core Technology

Peoplesoft Enterprise Peopletools

References · 5

• https://oracle.com/security-alerts/cpuoct2025.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15923 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53065 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53065 · Security Note
• https://twitter.com/CVEnew/status/1980736611047637091 · Twitter Post