This vulnerability in PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 involves the Panel Processor component and permits a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation requires user interaction from a third party and can lead to unauthorized modification (update, insert, delete) and partial unauthorized reading of accessible data. The vulnerability impacts confidentiality and integrity but not availability, with a CVSS vector of AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N. The attack scope includes potential impact on additional PeopleSoft products beyond PeopleTools.

Successful exploitation can result in unauthorized update, insert, or delete access to some PeopleSoft Enterprise PeopleTools accessible data, as well as unauthorized read access to a subset of that data. This compromises data confidentiality and integrity but does not affect availability. The attack requires network access and user interaction, limiting ease of exploitation.

Oracle has released security patches as part of their August 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to affected versions 8.61 through 8.63. No indication of 'no action required' or 'already mitigated' is present; therefore, patching is the recommended mitigation. Refer to Oracle's official advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for patch availability and installation instructions.