Vulnerability in PeopleSoft Enterprise PeopleTools Rich Text Editor by Oracle

CVE-2022-21369

What is CVE-2022-21369?

An exploitable security misconfiguration in Oracle's PeopleSoft Enterprise PeopleTools, particularly within the Rich Text Editor component, allows unauthenticated attackers with network access to compromise the system. Successful exploitation necessitates human interaction from another user, which can lead to unauthorized access, enabling attackers to update, insert, or delete data, in addition to reading sensitive information. This vulnerability poses a significant risk to data integrity and confidentiality within applications utilizing PeopleSoft Enterprise PeopleTools.

References