A vulnerability exists in the PeopleSoft Enterprise PeopleTools Application Data Sets component (8.61-8.63) that allows an attacker with low privileges and network access through HTTP to create, delete, or modify data and cause application hangs or crashes. The flaw results in significant integrity and availability compromise, enabling unauthorized changes to critical information and potentially bringing the system down for all users.

The affected product is Oracle PeopleSoft Enterprise PeopleTools version 8.61 through 8.63. Any installation of these product releases on a network exposed to HTTP traffic is vulnerable. No other product variants were identified as affected.

The CVSS score of 6.8 indicates a high impact on integrity and availability, but the attacker must first have network access and a low-privilege account. The EPSS score of < 1% (a very low probability) suggests exploitation is unlikely, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is over the network via HTTP, where an attacker may send specially crafted requests to trigger the flaw.