A vulnerability in the Multichannel Framework component of Oracle Peoplesoft Enterprise PeopleTools allows a high‑privileged attacker with network access via HTTP to compromise the application. Successful exploitation can lead to full takeover of the system, affecting confidentiality, integrity, and availability. The CVSS 3.1 base score of 6.6 reflects these impacts and indicates that authentication or privilege in the affected versions is inadequate.

Oracle Peoplesoft Enterprise PeopleTools versions 8.61 through 8.63 are impacted. The vulnerability is located in the Multichannel Framework component and is relevant to organizations running these versions of PeopleSoft Enterprise PeopleTools.

The CVSS score of 6.6 denotes a moderate‑to‑high risk. No EPSS score is provided, and the vulnerability is not listed in the CISA KEV catalog as of this analysis. The attack vector is network based over HTTP and requires a high‑privileged attacker, which raises the threshold for exploitation. While the vulnerability is considered difficult to exploit, any successful attack would grant an attacker full control over the PeopleSoft instance.