PT-2025-42982 · Oracle · Peoplesoft Enterprise Fin Maintenance Management

Published 2025-10-21 · Updated 2025-10-29 · CVE-2025-61761

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 9.2

Description A flaw exists within the Work Order Management component of Oracle PeopleSoft Enterprise FIN Maintenance Management. A low-privileged attacker with network access via HTTP can compromise the system. Successful exploitation may lead to unauthorized data modification, insertion, or deletion, as well as unauthorized data reading.

Recommendations Update PeopleSoft Enterprise FIN Maintenance Management version 9.2 to a newer, secure version.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-61761

Affected Products

Peoplesoft Enterprise Fin Maintenance Management

References · 8

• https://oracle.com/security-alerts/cpuoct2025.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61761 · Security Note
• https://osv.dev/vulnerability/CVE-2025-61761 · Vendor Advisory
• https://t.me/cveNotify/139887 · Telegram Post
• https://t.me/CVEtracker/35420 · Telegram Post
• https://twitter.com/CVEnew/status/1980736592466845834 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1980800866111144074 · Twitter Post
• https://t.me/cveNotify/140876 · Telegram Post