CVE-2023-21831 | Vulnetix

CVE-2023-21831 PUBLISHED CVSS 5.3 MEDIUM

Reported by oracle · Published January 17, 2023

Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft (component: Advising Notes). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Academic Advisement. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise CS Academic Advisement accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Risk scores

CVSS 3.1

5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Vendor	Product	Versions
Oracle Corporation	PeopleSoft Enterprise CS Academic Advisement	9.2
Oracle Corporation	PeopleSoft Enterprise CS Academic Advisement	9.2

Timeline

Jan 17, 2023 CVE Published
Jan 18, 2023 EPSS Score (30 in total, the first dated here)
Sep 17, 2024 CVE Updated
May 19, 2026 Coalition ESS Score
Jun 2, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2023-21831
vulnetix vdb fixes CVE-2023-21831

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-21831/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Oracle Advisory vendor-advisory

Look up in the Resolve Platform →