Oracle PeopleSoft Enterprise PeopleTools PIA Core Technology Unauthorized Data Access Vulnerability

A vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools, specifically in the PIA Core Technology component, affecting versions 8.60, 8.61, and 8.62. This vulnerability allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the issue is contained within PeopleTools, it may also significantly impact other products, leading to a scope change. Exploitation of this vulnerability could result in unauthorized access to update, insert, or delete certain data within PeopleSoft Enterprise PeopleTools, as well as unauthorized read access to a subset of accessible data.

Impact

Exploitation allows for unauthorized modification or deletion of data within PeopleSoft Enterprise PeopleTools, as well as unauthorized read access to some of the accessible data.