Vulnerability in Oracle PeopleSoft Products Affecting Form and Approval Builder
CVE-2019-2419
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 16 January 2019
What is CVE-2019-2419?
A vulnerability exists in the PeopleSoft Enterprise CC Common Application Objects component of Oracle PeopleSoft Products, specifically within the Form and Approval Builder. This flaw permits low-privileged attackers with network access via HTTP to exploit the system. To successfully execute an attack, human interaction from a third party is needed. As a result, potential unauthorized actions such as updating, inserting, or deleting data can occur within the accessible data of the PeopleSoft Enterprise CC Common Application Objects. Additionally, this vulnerability can enable unauthorized reading of sensitive data, impacting not just the targeted component but potentially affecting other associated products as well. For further details regarding patches and mitigation, refer to the related Oracle documentation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
PeopleSoft Enterprise CC Common Application Objects 9.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved