CVE-2025-53059
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Affected versions are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts).
Risk Assessment
Unauthorized access to critical data can lead to confidentiality breaches. The high privilege requirement reduces risk but still poses a threat to data security.
Recommendation
Apply Oracle patches for versions 8.60, 8.61, and 8.62. Restrict system access and monitor high-privilege user activity.
Other vulnerabilities in PeopleSoft Enterprise PeopleTools
See all- CVE-2026-101417Low
Vulnerability in PeopleSoft Enterprise PeopleTools (component Tuxedo) affecting versions 8.61-8.63. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP allows unauthorized read access to a subset of data.
- CVE-2026-101414Low
Vulnerability in PeopleSoft Enterprise PeopleTools (component Porting) affecting versions 8.61-8.63. A difficult-to-exploit attack by an unauthenticated attacker logged into the infrastructure allows unauthorized update, insert, or delete access to data.
- CVE-2017-10364High
Vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise allows low privileged attackers to access critical data. Versions 8.54, 8.55, and 8.56 are susceptible to easily exploitable attacks via HTTP.
- CVE-2017-3519High
A vulnerability in the PeopleTools component of Oracle PeopleSoft Products allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in PeopleSoft Enterprise PeopleTools.
- CVE-2016-8291High
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.
- CVE-2016-5472High
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity, and availability via vectors related to Install and Packaging.
- CVE-2016-5465High
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Panel Processor.
- CVE-2026-60821Critical
Vulnerability in PeopleSoft Enterprise PeopleTools (Business Interlink component) versions 8.61-8.63. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.
- CVE-2026-35273CriticalActively exploited
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Management). Affects versions 8.61 and 8.62. Easily exploitable, allows an unauthenticated attacker via HTTP to take over PeopleSoft Enterprise PeopleTools.
- CVE-2026-91519Medium
Vulnerability in PeopleSoft Enterprise PeopleTools (Report Distribution component) affecting versions 8.61–8.63. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data or all data accessible in PeopleTools.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS