CVE-2017-10015: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponen...

Security readout for executives and security teams

This affects Oracle PeopleSoft Enterprise PeopleTools 8.54 and 8.55. An attacker who already has low-privileged logon access to the infrastructure could gain unauthorized access to sensitive PeopleTools data. The public record rates exploitation as difficult, but the confidentiality impact can be serious if PeopleSoft holds critical business data. Exposure is limited to supported PeopleTools 8.54 and 8.55 deployments, especially environments where non-administrative users can log on to systems where PeopleTools executes. Treat as a moderate-priority PeopleSoft confidentiality risk. It is not described as remotely exploitable or actively exploited, but affected ERP environments can contain sensitive HR, finance, and operational data. Mitigation focus: Review Oracle's July 2017 CPU guidance for this PeopleTools issue.; Apply the vendor-supported PeopleTools security update or upgrade path.; Restrict infrastructure logon access to PeopleSoft systems to required administrators only..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.