Integration Broker Vulnerability in PeopleSoft Enterprise Tools by Oracle
CVE-2022-21512
4.4MEDIUM
Key Information:
- Vendor
- Oracle
- Vendor
- CVE Published:
- 19 July 2022
Summary
A vulnerability has been identified in the Integration Broker component of Oracle's PeopleSoft Enterprise PeopleTools. This issue affects the supported versions 8.58 and 8.59, allowing attackers with privileged access to exploit the system. A successful attack can grant unauthorized access to sensitive data, possibly leading to a complete compromise of all accessible data within the PeopleSoft environment. Organizations using these versions should assess their security posture to prevent potential exploitation.
Affected Version(s)
PeopleSoft Enterprise PT PeopleTools 8.58
PeopleSoft Enterprise PT PeopleTools 8.59
References
CVSS V3.1
Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved