A remote exploitation scenario exists in the Oracle PeopleSoft Enterprise PeopleTools WebLogic component that permits an unauthenticated attacker with TLS network connectivity to gain unauthorized access to sensitive data and perform write operations. The vulnerability, rated with a CVSS v3.1 score of 6.5, delivers a high confidentiality impact and a lower integrity impact, meaning an attacker can read confidential business information and modify records but does not affect availability. This aligns with a weakness in authentication and authorization mechanisms, allowing attackers to bypass normal access controls.

The affected product is Oracle PeopleSoft Enterprise PeopleTools, specifically the WebLogic component of versions 8.61 through 8.63. No other vendors or products are listed as impacted.

With no EPSS score reported and the vulnerability absent from the CISA KEV catalog, the likelihood of immediate exploitation appears low, yet the potential damage from successful exploitation is significant. The attack requires network access to the TLS interface of PeopleSoft and leverages an authentication bypass. If an attacker can reach this endpoint, the impact includes full read access to all PeopleSoft data and the ability to insert, update, or delete entries. The CVSS rating indicates moderate to high risk, making this a priority for patch management and network hardening.