Vulnerability in PeopleSoft Enterprise PeopleTools by Oracle

CVE-2023-22080

Summary

This vulnerability in Oracle's PeopleSoft Enterprise PeopleTools component, specifically affecting versions 8.59 and 8.60, allows unauthenticated attackers to compromise the system via HTTP. Exploitation requires human interaction from a third-party user, potentially leading to unauthorized data modifications such as updates, inserts, or deletions, as well as read access to sensitive information within PeopleSoft. The implications may extend beyond the core product, affecting various interlinked systems and increasing the overall risk to organizational data security.

References