Vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal allows an unauthenticated attacker with network access to update, insert or delete data accessible through the web interface. The flaw is difficult to exploit; successful exploitation compromises the integrity of PeopleSoft data without requiring authentication. The weakness is associated with improper authorization checks and results in unauthorized modification of stored information.

Oracle PeopleSoft Enterprise PeopleTools versions 8.61, 8.62, and 8.63 are affected. The impact applies when the Portal component is exposed to HTTP traffic on the network.

The CVSS base score is 3.7, indicating low severity. The EPSS score is less than 1%, suggesting a very low likelihood of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. Attackers need only network access to the HTTP interface of the Portal; no elevated privileges or user interaction are required. Because the flaw permits data integrity attacks, the risk primarily lies in unauthorized modifications to PeopleSoft‑stored information.