Unauthenticated Access Vulnerability in PeopleSoft Enterprise PeopleTools by Oracle
CVE-2022-21470
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 19 April 2022
What is CVE-2022-21470?
The vulnerability in Oracle's PeopleSoft Enterprise PeopleTools allows unauthenticated attackers to gain access via HTTP, leading to unauthorized modifications and access to sensitive data. This vulnerability requires interaction from a legitimate user to be executed, making it particularly dangerous as it can extend its impact to other interconnected systems. It poses a risk of unauthorized data updates, inserts, and deletions, affecting the integrity and confidentiality of the data managed by PeopleSoft.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
PeopleSoft Enterprise PT PeopleTools 8.58
PeopleSoft Enterprise PT PeopleTools 8.59
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved