PT-2025-42983 · Oracle · Peoplesoft Enterprise Fin Payables

Published 2025-10-21 · Updated 2025-10-22 · CVE-2025-61762

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 9.2

Description A flaw exists within the PeopleSoft Enterprise FIN Payables component that could allow a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation may lead to unauthorized data modification, insertion, or deletion, as well as unauthorized read access to certain data and a partial denial of service.

Recommendations Update PeopleSoft Enterprise FIN Payables to a version beyond 9.2.

Fix

DoS

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-61762

Affected Products

Peoplesoft Enterprise Fin Payables

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-61762 · Security Note
• https://oracle.com/security-alerts/cpuoct2025.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-61762 · Vendor Advisory
• https://twitter.com/CVEnew/status/1980736591539892574 · Twitter Post
• https://t.me/CVEtracker/35421 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1980813665159794689 · Twitter Post