CyberRota Analysis
AI-GeneratedThe vulnerability affects Oracle's PeopleSoft Enterprise FIN eSettlements product, specifically version 9.2, allowing high-privileged attackers with access to the infrastructure to gain unauthorized read access to certain data within the application. While the CVSS score is low, organizations using this version should prioritize remediation to mitigate potential data exposure risks. This is particularly relevant for IT security teams managing PeopleSoft environments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN eSettlements executes to compromise PeopleSoft Enterprise FIN eSettlements. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FIN eSettlements accessible data. CVSS 3.1 Base Score 2.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
Related CVEs
Other vulnerabilities affecting the same vendor(s)