• Confidentiality: High — attacker may access all data
• Integrity: High — attacker may modify or destroy data
• Availability: High — attacker may disrupt system operations entirely

• Apply the available patch immediately via Oracle Support (Patch Availability Document ID: CPU187).
• Ensure PeopleSoft PeopleTools installations are on versions 8.61 or 8.62 (supported versions). Earlier unsupported versions should be upgraded.
• Remain on actively-supported versions and apply all Critical Patch Updates, Critical Security Patch Updates, and Security Alerts without delay.
• Review network access controls to restrict HTTP access to PeopleSoft environments from untrusted networks as a compensating control.

In addition to the vendor supplied patches and remediation, TrendAI has released several critical protections against exploitation:

TrendAI Vision One Threat Intelligence Hub
 

TrendAI has added information into the Vision One Threat Intelligence Hub that provides relevant background information including Tactics, Techniques and Procedures (TTPs), Risk Management Guidance, and Threat Hunting Queries.





Detection Rules and Filters

TrendAI Vision One Endpoint Security IPS Rules (including Server and Workload Security (SWP) and Deep Security)

• Rule 1012580 – Oracle Peoplesoft PeopleTools SSRF Vulnerability

• Filter 47502 – HTTP: Oracle PeopleSoft Server-Side Request Forgery Vulnerability

• Rule 5855 – Peoplesoft PeopleTools Environment Management Hub (PSEMHUB) SSRF Exploit – HTTP(Request)