CVE-2025-30713
First published: Tue Apr 15 2025(Updated: )
Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Talent Acquisition Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM Talent Acquisition Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Talent Acquisition Manager accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Talent Acquisition Manager accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Peoplesoft Enterprise Hcm Talent Acquisition Manager | =9.2 | |
| Oracle Peoplesoft Enterprise Hcm Talent Acquisition Manager |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-30713?
CVE-2025-30713 is classified as an easily exploitable vulnerability that poses a significant risk to Oracle PeopleSoft users.
How do I fix CVE-2025-30713?
To mitigate CVE-2025-30713, it is recommended to apply the latest security patches provided by Oracle for PeopleSoft Enterprise HCM version 9.2.
Who is affected by CVE-2025-30713?
CVE-2025-30713 affects users of Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager version 9.2.
Can CVE-2025-30713 be exploited remotely?
Yes, CVE-2025-30713 can be exploited by low privileged attackers with network access via HTTP.
What component of Oracle PeopleSoft does CVE-2025-30713 impact?
CVE-2025-30713 specifically impacts the Job Opening component of the Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager.
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/source
- agent/author
- agent/description
- agent/weakness
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/guess-ai
- vendor/oracle
- canonical/oracle peoplesoft enterprise hcm talent acquisition manager
- version/oracle peoplesoft enterprise hcm talent acquisition manager/9.2