CVE-2025-53050

HighCVSS 7.5

Published: 21/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

35th percentile - higher than 35% of all known CVEs

Summary

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Performance Monitor). Affected versions are 8.60, 8.61, and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.5 (Availability impacts).

Risk Assessment

An unauthenticated attacker can cause complete denial of service of PeopleSoft Enterprise PeopleTools, potentially disrupting systems based on PeopleTools.

Recommendation

Apply patches provided by Oracle for versions 8.60, 8.61, and 8.62. Restrict network access to the system.

Other vulnerabilities in Oracle PeopleSoft Enterprise PeopleTools

CVE-2025-61750Medium
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Query) affecting versions 8.61 and 8.62. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, resulting in unauthorized read access to a subset of accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).

Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS