CVE-2022-21364: Medium severity oracle peopletools vulnerability
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-21364?
The severity of CVE-2022-21364 is medium with a CVSS score of 5.3.
Which versions of Oracle PeopleSoft Enterprise PeopleTools are affected by CVE-2022-21364?
Versions 8.57, 8.58, and 8.59 of Oracle PeopleSoft Enterprise PeopleTools are affected by CVE-2022-21364.
How can an unauthenticated attacker exploit CVE-2022-21364?
An unauthenticated attacker with network access via HTTP can exploit CVE-2022-21364 to compromise Oracle PeopleSoft Enterprise PeopleTools.
What is the recommended solution for CVE-2022-21364?
Apply the necessary patches or updates provided by Oracle to remediate CVE-2022-21364.
Where can I find more information about CVE-2022-21364?
You can find more information about CVE-2022-21364 on the Oracle Security Alerts website: https://www.oracle.com/security-alerts/cpujan2022.html