This vulnerability in Oracle PeopleSoft Enterprise PT PeopleTools (Performance Monitor component) affects versions 8.61 and 8.62. It allows an unauthenticated attacker with network access over HTTP to compromise the system, potentially resulting in complete takeover. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability. The attack complexity is high, and no privileges or user interaction are required. Oracle's June 2026 Critical Security Patch Update addresses this vulnerability among others. The vendor strongly urges customers to apply the patches without delay to mitigate the risk.

Successful exploitation can lead to full compromise of PeopleSoft Enterprise PT PeopleTools, impacting confidentiality, integrity, and availability of the system. This could allow an attacker to take over the affected PeopleTools environment. The vulnerability is exploitable remotely without authentication but requires network access via HTTP and has a high attack complexity.

Oracle has released patches for this vulnerability as part of the June 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk. Until patches are applied, reducing attack surface by blocking unnecessary network protocols and restricting privileges may help lower risk, but these measures might impact application functionality. Patch status is confirmed by the vendor advisory; therefore, applying the official patches is the recommended remediation.