This vulnerability affects Oracle PeopleSoft Enterprise PT PeopleTools versions 8.61 and 8.62 and involves a flaw in the Weblogic component. An unauthenticated attacker with network access over HTTP can exploit this vulnerability, which is difficult to exploit but can lead to unauthorized creation, deletion, or modification of critical data within PeopleTools. The vulnerability has a CVSS 3.1 score of 8.7, indicating high impact on confidentiality and integrity, with no impact on availability. The scope of impact extends beyond PeopleTools to additional Oracle products. Oracle's June 2026 Critical Security Patch Update includes patches for this vulnerability and related issues. Oracle strongly advises customers to apply these patches without delay to mitigate the risk.

Successful exploitation can result in unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by PeopleSoft Enterprise PT PeopleTools. The vulnerability affects confidentiality and integrity but does not impact availability. The attack requires network access via HTTP and is difficult to exploit. The scope of impact may extend to additional Oracle products beyond PeopleTools.

Oracle has released patches for this vulnerability as part of the June 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk. Until patches are applied, risk may be reduced by blocking network protocols required by the attack and by removing unnecessary privileges or access to vulnerable packages from users. These mitigations may impact application functionality, so patching is the recommended approach. Patch status is confirmed as available via Oracle's Critical Security Patch Update.