Vulnerability in Oracle People's Approval Framework Component

CVE-2022-39406

What is CVE-2022-39406?

The vulnerability affects Oracle's PeopleSoft Enterprise Common Components, specifically the Approval Framework component. It allows a low-privileged attacker with network access to compromise system integrity through easily exploitable means. Successful exploitation may result in unauthorized creation, deletion, or modification of critical data, ultimately granting attackers access to all accessible data within the PeopleSoft system. This raises significant security concerns, emphasizing the need for prompt remediation.

References