Vulnerability in Oracle PeopleSoft HCM Global Payroll Security Features

CVE-2020-14778

What is CVE-2020-14778?

An exploitable security vulnerability exists in Oracle's PeopleSoft Enterprise HCM Global Payroll Core product. Specifically, the issue allows low-privileged attackers with network access via HTTP to compromise sensitive areas of the system. Exploitation may lead to unauthorized modifications, including the ability to update, insert, or delete critical payroll data, while also permitting unauthorized read access to sensitive information. Furthermore, this vulnerability could be leveraged to induce a partial denial of service, impacting system availability.

References