Web Application Vulnerability in Oracle PeopleSoft Products – Candidate Gateway

CVE-2019-2591

Summary

A vulnerability exists in the Candidate Gateway of Oracle PeopleSoft Enterprise HRMS 9.2, allowing unauthenticated attackers with network access via HTTP to significantly compromise the system. Exploitation of this vulnerability can lead to unauthorized updates, inserts, or deletions of accessible data within the PeopleSoft environment. Moreover, it may allow unauthorized read access to specific datasets, necessitating human interaction from a party other than the attacker to exploit successfully. Organizations utilizing this product should apply necessary patches and enhance security measures to mitigate potential risks associated with this vulnerability.

References