CVE-2024-21122

Summary

CVE-2024-21122 is a vulnerability affecting the Text Catalog component of Oracle PeopleSoft's Enterprise HCM Shared Components (version 9.2). This issue allows low-privileged attackers with network access to compromise the system via HTTP. Successful exploitation requires human interaction and may lead to significant impact on additional products. The vulnerability grants unauthorized access to update, insert, or delete some data in PeopleSoft Enterprise HCM Shared Components, as well as unauthorized read access to a subset of data. The Base Score, according to CVSS 3.1, is 5.4 due to both Confidentiality and Integrity impacts. Attack vectors include network access (AV:N), low complexity (AC:L), and user interaction (PR:L) with a remote attack surface (UI:R).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.