Vulnerability in Oracle PeopleSoft Enterprise CS Academic Advisement Product

CVE-2021-35571

Summary

A vulnerability exists in the PeopleSoft Enterprise CS Academic Advisement product which allows a low-privileged attacker with network access to compromise the system via HTTP. Successful exploitation can lead to unauthorized updates, inserts, or deletions of accessible data within the PeopleSoft Enterprise CS Academic Advisement module. Furthermore, attackers may gain unauthorized read access to certain data subsets, affecting the confidentiality and integrity of critical academic information.

References