CRITICAL🇵🇱 Wersja polska

CVE-2022-21543

CVSS 9.8v3.1pub. 2022-07-19upd. 2024-11-21

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Oracle Peoplesoft Enterprise Peopletools

    APP
    Oracle
    8.588.59
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth BypassDoS
CWE
References

Related vulnerabilities

CVE-2026-35273CRITICAL9.8⚠ KEVPL ✓same product

Pominięcie uwierzytelnienia w Oracle PeopleSoft PeopleTools (RCE/Takeover)

CVE-2019-2725CRITICAL9.8⚠ KEVPL ✓same product

RCE w Oracle WebLogic Server — przejęcie serwera bez uwierzytelnienia

CVE-2021-3711CRITICAL9.8PL ✓same product

Buffer overflow w dekodowaniu SM2 w OpenSSL — przepełnienie bufora na stercie

CVE-2021-22931CRITICAL9.8PL ✓same product

RCE i XSS w Node.js przez brak walidacji odpowiedzi DNS

CVE-2021-23926CRITICAL9.1PL ✓same product

Apache XMLBeans — podatność na XML Entity Expansion (XEE)