CVE-2022-21345: Medium severity oracle peopletools vulnerability
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-21345?
CVE-2022-21345 is a vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft.
What are the affected versions of PeopleSoft Enterprise PeopleTools?
The affected versions are 8.58 and 8.59.
How can an attacker exploit CVE-2022-21345?
An attacker with low privileges and network access via HTTP can exploit the vulnerability.
What is the severity of CVE-2022-21345?
The severity of CVE-2022-21345 is medium with a severity value of 6.5.
Where can I find more information about CVE-2022-21345?
You can find more information about CVE-2022-21345 in the Oracle Security Alerts, specifically the CPU Jan 2022 advisory.