The vulnerability resides in the Porting component of Oracle PeopleSoft Enterprise PeopleTools, enabling a high privileged local attacker to compromise the application. Successful exploitation permits unauthorized creation, deletion, or modification of critical data, as well as full access to all data stored by PeopleSoft. The impact covers both confidentiality and integrity; availability is not directly affected.

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 are affected. The vulnerability applies to installations of PeopleSoft where the Porting component is deployed and local system administrators have elevated privileges.

The CVSS 3.1 Base Score of 6.0 reflects a moderate severity, driven by a local attack vector, low complexity, and high privileges required. Because a high privileged local user can exploit this flaw, an attacker with direct access to the PeopleSoft infrastructure can immediately compromise data integrity and confidentiality. The EPSS score of < 1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, suggesting that while the risk is real, it may not be actively exploited yet.