A local vulnerability in the SQR component of Oracle PeopleSoft Enterprise PeopleTools allows an attacker who already has high‑privilege access to the infrastructure to create, delete, or modify critical data and to trigger application hangs or crashes. It does not provide network-level access, but it enables privileged insiders or trusted administrators to undermine normal operations and disrupt service availability.

Oracle Corporation’s PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 are affected. The CVSS vector indicates a scope change, implying that exploitation within these releases can potentially impact additional related products or modules that operate on the same infrastructure.

The CVSS v3.1 score of 6.9 reflects moderate‑to‑high risk focused on integrity and availability. Exploitation requires local, high‑privilege credentials and a separate person’s cooperation, limiting the threat to insiders or administrators. The EPSS score of <1% indicates a historically low probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. Nevertheless, the ability to alter critical data and cause service downtime makes it a significant concern for organizations running the affected PeopleSoft versions.