This vulnerability affects Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology component) versions 8.61 and 8.62. It enables a high privileged attacker with network access via HTTP to compromise the system, resulting in unauthorized access to critical or all accessible data. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact. The vendor advisory references Oracle's July 2026 Critical Patch Update but does not explicitly confirm a patch or remediation for this specific vulnerability.

Successful exploitation can lead to unauthorized access to critical or all data accessible through PeopleSoft Enterprise PeopleTools. The impact is limited to confidentiality, with no reported effects on integrity or availability. The vulnerability requires a high privileged attacker with network access, reducing the likelihood of exploitation by low-privileged users.

Oracle's July 2026 Critical Patch Update advisory recommends applying security patches promptly to supported products. However, no explicit patch or remediation level is confirmed for this vulnerability in the advisory. Organizations using affected versions 8.61 and 8.62 should monitor Oracle's security advisories for updates and apply patches as soon as they become available. Until an official fix is released, restrict network access to PeopleSoft Enterprise PeopleTools interfaces to trusted users with appropriate privileges.