An exploitable flaw in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools allows an attacker who possesses only low‑privilege access and network connectivity via HTTP to create, delete, or modify critical data. In addition to the integrity breach, the same vulnerability can trigger application hangs or repeated crashes, leading to a complete denial of service. This vulnerability therefore carries high integrity and availability impacts as quantified by the CVSS 3.1 score of 8.1.

Oracle Corporation’s PeopleSoft Enterprise PeopleTools, specifically versions 8.61 through 8.63, are affected. The flaw resides in the web‑based Report Distribution module, so any installation of these product versions exposed to HTTP traffic is at risk.

The CVSS severity of 8.1 classifies the issue as high. The EPSS score of < 1 % indicates a very low but non‑zero likelihood of exploitation, yet the vulnerability is described as easily exploitable and requires only low‑privilege credentials over a network connection. The flaw is not listed in the CISA KEV catalog, but its combination of unauthorized data access and denial of service makes it a serious risk for organizations that rely on the affected PeopleSoft versions.