Vulnerability in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools allows a low‑privileged attacker with network access via HTTP to compromise the application. The flaw is difficult to exploit, but a successful attack can result in complete takeover of the PeopleSoft Enterprise PeopleTools instance. The CVSS vector indicates that confidentiality, integrity and availability are all impacted, reflecting a moderate‑to‑high severity threat.

Affected platform is Oracle PeopleSoft Enterprise PeopleTools, specifically versions 8.61 through 8.63. No other versions are listed; updates beyond 8.63 are presumed to include the fix.

The CVSS base score is 7.5, signalling a high severity vulnerability. Exploitability is rated high difficulty with a low privilege requirement and no user interaction, and the attack vector is remote over HTTP. EPSS is not available, so the probability of widespread exploitation cannot be accurately estimated, and the vulnerability is not yet listed in the CISA KEV catalog. In practice, the risk depends on network exposure of the Business Interlink component; a publicly reachable endpoint could allow attackers to gain full control.