Vulnerability in Financial Sanctions Component of Oracle PeopleSoft

CVE-2021-2044

What is CVE-2021-2044?

A vulnerability exists in the Financial Sanctions component of Oracle PeopleSoft Enterprise FIN Payables, specifically affecting version 9.2. This flaw can be exploited by low-privileged attackers with network access via HTTP, enabling them to gain unauthorized access to sensitive data. Successful exploitation may lead to the exposure of critical information or even complete control over the accessible data within the PeopleSoft application, highlighting significant security risks for organizations using this platform.

References