This vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.62 (component: PIA Core Technology) permits an unauthenticated attacker with network access over HTTP to compromise the system. Exploitation requires user interaction from a person other than the attacker. The vulnerability impacts confidentiality, integrity, and availability, allowing unauthorized data modification (update, insert, delete), unauthorized read access to some data, and partial denial of service. The scope of impact may extend beyond PeopleTools to additional Oracle products. The CVSS vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impacts on confidentiality, integrity, and availability. No official patch or remediation level is explicitly stated in the vendor advisory, but Oracle's July 2026 Critical Patch Update advisory should be consulted for patch availability.

Successful exploitation can result in unauthorized modification (update, insert, delete) of some PeopleSoft Enterprise PeopleTools accessible data, unauthorized read access to a subset of accessible data, and partial denial of service conditions. The vulnerability affects confidentiality, integrity, and availability with a high severity rating. The attack requires user interaction from a third party and network access via HTTP. The scope of impact may extend beyond PeopleTools to other Oracle products.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches without delay and remaining on actively-supported versions. No specific temporary mitigations or workarounds are provided in the advisory content.