Unauthorized Access Vulnerability in PeopleSoft Enterprise CS by Oracle
CVE-2023-21831

5.3MEDIUM

Key Information:

Vendor
Oracle
Status
PeopleSoft Enterprise CS Academic Advisement
Vendor
CVE Published:
18 January 2023

Summary

A vulnerability has been identified in Oracle's PeopleSoft Enterprise CS Academic Advisement product, specifically within the Advising Notes component. This issue allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to sensitive data within PeopleSoft Enterprise CS Academic Advisement version 9.2. Organizations utilizing this product should take immediate steps to mitigate any potential risks associated with this exposure.

Affected Version(s)

PeopleSoft Enterprise CS Academic Advisement 9.2

References

https://www.oracle.com/security-alerts/cpujan2023.html
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.