Vulnerability in Oracle PeopleSoft HCM Talent Acquisition Manager Component
CVE-2019-2590

8.2HIGH

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Hcm Talent Acquisition Manager
Vendor
CVE Published:
23 April 2019

What is CVE-2019-2590?

A vulnerability exists in the PeopleSoft Enterprise HCM Talent Acquisition Manager component of Oracle PeopleSoft Products, specifically affecting version 9.2. This flaw allows an unauthenticated attacker with network access via HTTP to compromise the component. The exploitation requires human interaction from a third party, enhancing the vulnerability's complexity. When successfully exploited, this can lead to unauthorized access to sensitive data or unrestricted modification capabilities, posing a significant risk to the privacy and integrity of the data within PeopleSoft Enterprise HCM Talent Acquisition Manager. The impact may extend beyond the immediate component, potentially affecting additional associated products.

Affected Version(s)

PeopleSoft Enterprise HCM Talent Acquisition Manager 9.2

References

http://www.oracle.com/technetwork/security-advisory/cpuap...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.