Impact
The vulnerability exists in the PsAdmin component of Oracle PeopleSoft Enterprise PeopleTools, allowing an attacker with physical network access to the system to execute actions that compromise the entire application. The impact includes full compromise of confidentiality, integrity, and availability of the PeopleSoft Enterprise PeopleTools instance. Successful exploitation can result in full takeover of the system without authentication.
Affected Systems
The affected product is Oracle PeopleSoft Enterprise PeopleTools, specifically the PsAdmin component. Versions 8.61 through 8.63 are impacted. The vulnerability applies to installations of PeopleSoft Enterprise PeopleTools running on supported hardware that exposes a physical communication segment.
Risk and Exploitability
The CVSS score of 7.5 indicates a high severity, with the attack vector being adjacent network (physical network). Because it requires physical access, the likelihood of exploitation is moderate in most environments, but the risk rises sharply if an attacker gains physical proximity. The vulnerability is not listed in the CISA KEV catalog, and the EPSS score is not available.
OpenCVE Enrichment