CVE-2023-21981: Medium severity oracle peopletools vulnerability
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.58, 8.59 and 8.60. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-21981.
Which product is affected by this vulnerability?
The vulnerability affects the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft.
What versions of PeopleSoft Enterprise PeopleTools are vulnerable?
Versions 8.58, 8.59, and 8.60 of PeopleSoft Enterprise PeopleTools are vulnerable.
How severe is this vulnerability?
The severity of this vulnerability is medium, with a CVSS score of 4.9.
How can an attacker exploit this vulnerability?
An attacker with high privileges and network access via HTTP can exploit this vulnerability.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following link: [Oracle Security Alerts - April 2023](https://www.oracle.com/security-alerts/cpuapr2023.html)