CVE-2023-21845 | Vulnetix

CVE-2023-21845 PUBLISHED CVSS 5.4 MEDIUM

Reported by oracle · Published January 17, 2023

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). The supported version that is affected is 8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

Risk scores

CVSS 3.1

5.4

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Vendor	Product	Versions
Oracle Corporation	PeopleSoft Enterprise PT PeopleTools	8.60
Oracle Corporation	PeopleSoft Enterprise PT PeopleTools	8.60

Timeline

Jan 17, 2023 CVE Published
Jan 18, 2023 EPSS Score (30 in total, the first dated here)
Sep 17, 2024 CVE Updated
Feb 13, 2025 PoC Published (2 in total, the first dated here)
May 19, 2026 Coalition ESS Score
Jun 2, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2023-21845
vulnetix vdb fixes CVE-2023-21845

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-21845/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Oracle Advisory vendor-advisory

Look up in the Resolve Platform →