Vulnerability in Oracle PeopleSoft Products: Security Flaw in Enterprise HCM

CVE-2017-10304

Summary

An exploitable security vulnerability exists in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products. This flaw allows low-privileged attackers with network access via HTTP to manipulate data within the system. While the vulnerability resides in PeopleSoft Enterprise HCM, its successful exploitation can lead to unauthorized alterations, such as updates, insertions, or deletions of sensitive data. The attack requires human interaction, which indicates that the system's defenses could be bypassed through social engineering techniques. Additionally, the breach may result in unauthorized access to confidential information across additional, interconnected PeopleSoft products, heightening the risk of data exposure.

References