Unauthenticated Access Vulnerability in Oracle PeopleSoft Enterprise PeopleTools

CVE-2022-21272

What is CVE-2022-21272?

This vulnerability allows an unauthenticated attacker to exploit the PeopleSoft Enterprise PeopleTools component through network access via HTTP. Affected versions include 8.57, 8.58, and 8.59. Although successful exploitation requires user interaction, it can lead to unauthorized actions such as updating, inserting, or deleting sensitive data. Moreover, unauthorized read access to certain data within PeopleSoft may also occur, posing a risk to data confidentiality and integrity across the affected systems. Businesses using this platform should take immediate actions to mitigate these risks.

References