The vulnerability is found in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. A low privileged attacker who can reach the application over HTTP can receive unauthorized read access to a subset of the data that the PeopleSoft portal exposes and can also trigger a partial denial of service. This results in a confidentiality impact, as well as a reduction in the availability of the affected service.

Oracle PeopleSoft Enterprise PeopleTools, versions 8.61 and 8.62, are affected.

The Common Vulnerability Scoring System gives a 4.2 base score, reflecting moderate impact on confidentiality and availability. The Exploit Prediction Scoring System score of 0.00252 (0.25%) indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Attackers would need network access to the PeopleSoft portal over HTTP. The exploit is described as difficult but possible, suggesting that while the risk is lower than high‑severity flaws, it is non‑negligible for organizations that expose the portal to external or untrusted networks.