A flaw in the Analytic Server component of Oracle PeopleSoft Enterprise PeopleTools allows a low‑privileged attacker who can reach the system over HTTP to cause the application to hang or crash repeatedly. The only impact stated is a complete denial of service to the PeopleSoft application. The vulnerability is difficult to exploit and carries a CVSS v3.1 base score of 5.3, indicating moderate severity with an availability focus.

The issue affects Oracle Corporation PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. No other Oracle products or versions are listed as impacted.

Because the attack vector requires network access via HTTP and the attacker only needs low privileges, the risk depends largely on whether the affected services are exposed to untrusted networks. The CVSS score of 5.3 reflects a moderate threat level, and the EPSS score of less than 1% indicates a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Success would result in a repeatable crash of the PeopleSoft application, leading to service interruption.