Vulnerability in Oracle PeopleSoft Global Payroll Core

CVE-2024-21283

Summary

A critical vulnerability has been identified in Oracle's PeopleSoft Enterprise HCM Global Payroll Core product, specifically within the Global Payroll for Core component. This vulnerability impacts versions 9.2.48 through 9.2.50 and allows attackers with low-level privileges and network access via HTTP to exploit it. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data. Attackers could potentially gain complete access to all data within the PeopleSoft Enterprise HCM Global Payroll Core, jeopardizing the integrity and confidentiality of sensitive information. Organizations using the affected versions should prioritize applying the necessary patches to safeguard against these risks.

References