CVE-2023-22090

Summary

CVE-2023-22090 is a vulnerability affecting Oracle PeopleSoft's Events & Notifications component in the PeopleSoft Enterprise CC Common Application Objects product, version 9.2. This easily exploitable issue allows a low-privileged attacker with network access via HTTP to compromise the system. A successful attack can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CC Common Application Objects accessible data, with a CVSS 3.1 Base Score of 6.5 for Confidentiality impacts. Attackers can exploit this vulnerability without user interaction or prior knowledge, making it a significant security concern.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.