Navigation Pages Vulnerability in Oracle PeopleSoft Enterprise PeopleTools

CVE-2022-21456

Summary

The identified vulnerability in Oracle PeopleSoft Enterprise PeopleTools affects versions 8.58 and 8.59, enabling unauthenticated attackers to exploit navigation pages through HTTP. This easily exploitable flaw necessitates human interaction for an attack to be successful. While the core vulnerability resides in PeopleSoft Enterprise PeopleTools, its impact could extend to additional products due to scope changes. Successful exploitation can lead to unauthorized access, allowing attackers to update, insert, or delete sensitive data, as well as read information that should remain confidential. Organizations using affected versions are urged to prioritize mitigation strategies to safeguard their data.

References