Vulnerability in Oracle PeopleSoft FIN Cash Management Component
CVE-2022-21481
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 19 April 2022
What is CVE-2022-21481?
A vulnerability exists in the PeopleSoft Enterprise FIN Cash Management product from Oracle, which allows low privileged attackers with network access to compromise the system through HTTP. Exploiting this flaw requires human interaction from a different user, increasing the risk of unauthorized data manipulations. Attackers may gain the ability to insert, update, or delete data, along with unauthorized read access to specific financial data. This vulnerability may not only affect the Cash Management product but could also have broader implications on other related components.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
PeopleSoft Enterprise FIN Cash Management 9.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved