CVE-2017-10251: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponen...

Security readout for executives and security teams

CVE-2017-10251 affects Oracle PeopleSoft PeopleTools 8.54 and 8.55. A low-privileged attacker who can log on where PeopleTools runs could gain unauthorized access to critical PeopleTools data. The issue is difficult to exploit and is confidentiality-focused, but PeopleSoft data can be business-sensitive. Exposure is limited to environments running PeopleSoft Enterprise PeopleTools 8.54 or 8.55, especially where low-privileged users can log on to the infrastructure hosting PeopleTools. The source bundle does not identify other affected versions or products. Treat this as a targeted confidentiality risk, not an internet-scale emergency based on the supplied evidence. Prioritize if PeopleSoft contains sensitive HR, finance, or identity data, or if many non-administrators can access the PeopleTools infrastructure. Mitigation focus: Identify all PeopleSoft PeopleTools deployments and confirm whether versions 8.54 or 8.55 are present.; Review Oracle’s July 2017 Critical Patch Update guidance for the applicable PeopleTools remediation.; Restrict infrastructure logon access to PeopleTools hosts to necessary administrators only..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.