The Analytic Server of Oracle's PeopleSoft Enterprise PeopleTools has a vulnerability that allows a low‑privileged attacker to initiate an HTTP request that can cause a partial denial of service. The flaw does not grant code execution or data exfiltration; its primary effect is to degrade availability of the PeopleSoft service. This weakness is a form of resource exhaustion or improper handling of input, classifiable under CWE‑400.

Oracle Corporation PeopleSoft Enterprise PeopleTools, versions 8.61 through 8.63, are vulnerable. The flaw exists specifically in the Analytic Server component. No other products or versions are affected according to the CNA data.

The CVSS base score is 3.1, indicating low severity. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited widespread exploitation. The attack vector is network‑based via HTTP and requires only low privileges. Because the impact is limited to availability and the exploit conditions are modest, the risk to most environments is low but non‑negligible for systems that rely heavily on PeopleSoft service uptime.