Integration Broker Vulnerability in PeopleSoft Enterprise Tools by Oracle
CVE-2022-21512

4.4MEDIUM

Key Information:

Vendor
Oracle
Vendor
CVE Published:
19 July 2022

Summary

A vulnerability has been identified in the Integration Broker component of Oracle's PeopleSoft Enterprise PeopleTools. This issue affects the supported versions 8.58 and 8.59, allowing attackers with privileged access to exploit the system. A successful attack can grant unauthorized access to sensitive data, possibly leading to a complete compromise of all accessible data within the PeopleSoft environment. Organizations using these versions should assess their security posture to prevent potential exploitation.

Affected Version(s)

PeopleSoft Enterprise PT PeopleTools 8.58

PeopleSoft Enterprise PT PeopleTools 8.59

References

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.