Vulnerability in Oracle PeopleSoft Enterprise CS Student Records Product

CVE-2021-35553

What is CVE-2021-35553?

A security flaw in the Oracle PeopleSoft Enterprise CS Student Records product enables a low-privileged attacker with network access via HTTP to compromise the system. The vulnerability primarily affects the Class Search component, requiring human interaction to execute an attack. Once exploited, this vulnerability could lead to unauthorized updates, inserts, or deletions of critical data, as well as unauthorized read access to sensitive information. Despite targeting PeopleSoft Enterprise CS Student Records, the repercussions may extend to related products, posing significant security risks to affected organizations.

References