CVE-2025-21563
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2025-21563 is a vulnerability affecting the Oracle PeopleSoft Enterprise CC Common Application Objects product, specifically version 9.2. This issue, with a base score of 4.3 in integrity impacts, allows a low-privileged network attacker to exploit the Run Control Management component via HTTP. Successful exploitation could lead to unauthorized data manipulation, such as update, insert, or delete access, in certain PeopleSoft Enterprise CC Common Application Objects. The attacker requires little access privilege and no user interaction, making this an easily exploitable vulnerability. The vector for this attack is network access with a low level of access complexity.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.