Vulnerability in PeopleSoft Enterprise PRTL Interaction Hub by Oracle

CVE-2017-10248

Summary

A vulnerability exists in the PeopleSoft Enterprise PRTL Interaction Hub of Oracle PeopleSoft Products that can be exploited by an unauthenticated attacker with network access. The flaw permits unauthorized individuals to compromise the integrity and confidentiality of the hub and its associated data. While the vulnerability specifically resides in the PeopleSoft Enterprise PRTL Interaction Hub, successful exploits can extend their impact to other connected products. To successfully execute an attack, human interaction is required, allowing unauthorized actions such as inserting, updating, or deleting data, as well as unauthorized reading of certain accessible information. This vulnerability poses a significant risk to sensitive business operations relying on PeopleSoft systems.

References