CVE-2024-21202

Summary

CVE-2024-21202 is a vulnerability affecting Oracle PeopleSoft's PeopleTools product (PIA Core Technology) versions 8.59, 8.60, and 8.61. This easily exploitable issue enables unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction, and the impact may extend beyond PeopleTools to additional affected products. The consequence of a successful attack includes unauthorized update, insert, or delete access to certain data and unauthorized read access to a subset of data. The base score as per CVSS 3.1 is 6.1 for both confidentiality and integrity impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.