A vulnerability exists in the Updates Environment Mgmt component of Oracle PeopleSoft Enterprise PeopleTools that permits a high‑privileged user with local logon to the underlying infrastructure to make unauthorized additions, deletions, or modifications to critical data and to trigger hangs or recurrent crashes of the PeopleTools application. The flaw is classed as high‑impact, affecting the integrity and availability of the application. The flaw corresponds to information exposure (CWE‑200).

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 are affected. The vulnerability applies to the Updates Environment Mgmt component of these releases.

The CVSS v3.1 base score is 6.0, indicating an above‑medium severity. The EPSS score is less than 1%, indicating a low but nonzero likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Attackers must already possess local administrative or higher credentials on the host running PeopleSoft, making the vulnerability exploitable in a local environment. Once exploited, the attacker can permanently alter data or disrupt service, resulting in a denial of service condition.