CVE-2025-53050CWE-400denial-of-service

CVE-2025-53050

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

🚨 An unauthenticated attacker can exploit this vulnerability simply by having network access! Imagine your digital fortress being taken down with minimal effort — that's the risk with PeopleSoft Enterprise PeopleTools! 🔥 Think of it like a power outage caused by someone flipping a switch outside your building. An attacker can trigger a complete crash, disrupting all operations without needing to enter the premises — they just need to be on the right network. 🏢⚡ If this vulnerability is successfully exploited, it could lead to a denial of service (DoS), causing the PeopleSoft system to hang or crash repeatedly. This means that legitimate users might find themselves locked out, unable to access vital services. Talk about chaos!

Put simply

Think of it like a power outage caused by someone flipping a switch outside your building. An attacker can trigger a complete crash, disrupting all operations without needing to enter the premises — they just need to be on the right network. 🏢⚡ This vulnerability allows an unauthenticated attacker with HTTP network access to compromise the PeopleSoft Performance Monitor component, leading to service disruption and potential downtime.

What to do

If this vulnerability is successfully exploited, it could lead to a denial of service (DoS), causing the PeopleSoft system to hang or crash repeatedly. This means that legitimate users might find themselves locked out, unable to access vital services. Talk about chaos! To protect your system, immediately apply patches and updates to the supported versions 8.60, 8.61, and 8.62. Ensure that network access is restricted to authorized users only and monitor your systems for any suspicious activity. You've got this! With the right steps, you can secure your PeopleSoft environment and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00429 · 36.1th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2025-10-22T00:20Z
Affected products (1)
ProductVersionsFixed in
oracle/peoplesoft_enterprise_peopletools≥ 8.60, ≤ 8.62—
References (1)
EPSS history
Timeline
  • 21 OCT 20:02Z
    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor)
    cvelistv5