Vulnerability in Oracle PeopleSoft Products Affecting Form and Approval Builder

CVE-2019-2419

Summary

A vulnerability exists in the PeopleSoft Enterprise CC Common Application Objects component of Oracle PeopleSoft Products, specifically within the Form and Approval Builder. This flaw permits low-privileged attackers with network access via HTTP to exploit the system. To successfully execute an attack, human interaction from a third party is needed. As a result, potential unauthorized actions such as updating, inserting, or deleting data can occur within the accessible data of the PeopleSoft Enterprise CC Common Application Objects. Additionally, this vulnerability can enable unauthorized reading of sensitive data, impacting not just the targeted component but potentially affecting other associated products as well. For further details regarding patches and mitigation, refer to the related Oracle documentation.

References