Vulnerability in Oracle PeopleSoft Enterprise Learning Management Component

CVE-2019-2707

Summary

A vulnerability exists in the PeopleSoft Enterprise ELM component of Oracle PeopleSoft Products, specifically affecting the application search feature. This flaw could be exploited by an unauthenticated attacker with network access via HTTP, potentially compromising sensitive data within the system. While the primary focus is on PeopleSoft Enterprise ELM, the impacts could extend to other related products. Successful exploitation can lead to unauthorized updates, insertions, deletions, and read access to accessible data, posing significant risks to the integrity and confidentiality of information handled by the system.

References