VDB

CISA-2023-22014

CISA-2023-22014 PUBLISHED CVSS 8.4 HIGH

Reported by oracle · Published July 18, 2023

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Risk Scores

CVSS 3.1
8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Oracle CorporationPeopleSoft Enterprise PT PeopleTools8.59, 8.60
Oracle CorporationPeopleSoft Enterprise PT PeopleTools8.59, 8.60, 8.60

Timeline

  • Jul 18, 2023 CVE Published
  • Sep 13, 2024 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›