Network Vulnerability in Oracle PeopleSoft HCM Human Resources
CVE-2019-2951

4.3MEDIUM

Key Information:

Vendor
Oracle
Status
Peoplesoft Enterprise Hcm Human Resources
Vendor
CVE Published:
16 October 2019

Summary

A vulnerability exists in the Oracle PeopleSoft Enterprise HCM Human Resources product that allows low privileged attackers to exploit network access via HTTP. Affected users of version 9.2 may face unauthorized read access to sensitive data. This flaw highlights potential security risks associated with network communications, emphasizing the importance of securing web-accessible applications to prevent data breaches.

Affected Version(s)

PeopleSoft Enterprise HCM Human Resources 9.2

References

http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.