CVE-2025-21563

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Jan 21, 2025

Summary

CVE-2025-21563 is a vulnerability affecting the Oracle PeopleSoft Enterprise CC Common Application Objects product, specifically version 9.2. This issue, with a base score of 4.3 in integrity impacts, allows a low-privileged network attacker to exploit the Run Control Management component via HTTP. Successful exploitation could lead to unauthorized data manipulation, such as update, insert, or delete access, in certain PeopleSoft Enterprise CC Common Application Objects. The attacker requires little access privilege and no user interaction, making this an easily exploitable vulnerability. The vector for this attack is network access with a low level of access complexity.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share