This vulnerability in Oracle PeopleSoft Enterprise PeopleTools (PeopleCode component) affects versions 8.61 to 8.63. It allows a high privileged attacker with network access via HTTP to compromise the system, potentially resulting in full takeover of PeopleTools. The CVSS 3.1 vector is AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle's August 2026 Critical Security Patch Update advisory includes this vulnerability and strongly recommends applying patches promptly to mitigate risk.

Successful exploitation can lead to complete compromise of PeopleSoft Enterprise PeopleTools, affecting confidentiality, integrity, and availability of the system. The attacker must have high privileges and network access via HTTP. No known exploits in the wild have been reported yet. The vulnerability is rated high severity with a CVSS score of 7.2.

Oracle has released a Critical Security Patch Update that addresses this vulnerability. Customers are strongly advised to apply the relevant security patches from the August 2026 Critical Security Patch Update without delay. Staying on actively supported versions and promptly applying patches is the recommended mitigation. No additional vendor advisory states that no action is required or that the vulnerability is already mitigated without patching.