Unauthenticated Network Vulnerability in Oracle PeopleSoft Enterprise PeopleTools

CVE-2022-21520

Summary

A security concern exists within Oracle's PeopleSoft Enterprise PeopleTools, specifically in the Fluid Core component. The vulnerability permits an unauthenticated attacker with network access via HTTP to potentially compromise the system. Exploitation of this flaw necessitates human interaction from another individual, potentially broadening the attack's effect on various interconnected products. Successful exploitation can lead to unauthorized modifications, including the ability to update, insert, or delete data within PeopleSoft Enterprise PeopleTools, as well as unauthorized access to certain data. This highlights a significant risk to the confidentiality and integrity of accessible data.

References