Vulnerability in PeopleSoft Enterprise PeopleTools by Oracle
CVE-2023-22080
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 17 October 2023
What is CVE-2023-22080?
This vulnerability in Oracle's PeopleSoft Enterprise PeopleTools component, specifically affecting versions 8.59 and 8.60, allows unauthenticated attackers to compromise the system via HTTP. Exploitation requires human interaction from a third-party user, potentially leading to unauthorized data modifications such as updates, inserts, or deletions, as well as read access to sensitive information within PeopleSoft. The implications may extend beyond the core product, affecting various interlinked systems and increasing the overall risk to organizational data security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
PeopleSoft Enterprise PT PeopleTools 8.59
PeopleSoft Enterprise PT PeopleTools 8.60
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved