Vulnerability in Oracle PeopleSoft Campus Community Frameworks

CVE-2019-2493

Summary

A vulnerability exists in the Oracle PeopleSoft Enterprise CS Campus Community component, specifically in its Frameworks subcomponent. This issue affects supported versions 9.0 and 9.2, allowing an unauthenticated attacker with network access via HTTP to compromise the integrity of the deployed system. Although the vulnerability is challenging to exploit, it can lead to unauthorized access, enabling the attacker to perform operations such as update, insert, or delete on accessible data within the PeopleSoft Campus Community. Successful exploitation necessitates human interaction from an individual other than the attacker, which adds a layer of complexity to the attack process.

References