The vulnerability in the Oracle PeopleSoft Enterprise PeopleTools SQR component permits an attacker with limited privileges who can reach the system over HTTP to seize control of the application. A successful exploitation compromises confidentiality, integrity, and availability, enabling a full takeover of PeopleSoft Enterprise PeopleTools. The CVSS 3.1 score of 7.5 reflects significant impact across all three core security domains.

Oracle Corporation’s PeopleSoft Enterprise PeopleTools, specifically versions 8.61 through 8.63, are affected.

The formulation of the CVE indicates network‑based exploitation is possible with a relatively high attack complexity, and although the EPSS score is not available, the high CVSS base score suggests a serious threat. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalogue, but the potential for remote compromise remains high, especially in environments where the SQR component is exposed to untrusted networks.