CVE-2024-21283

CWE-863 — Incorrect Authorization5 documents5 sources
Severity
8.1HIGH
EPSS
1.1%
top 21.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Peoplesoft Enterprise HCM Global Payroll CoreOracle Peoplesoft Enterprise
Timeline
PublishedOct 15

Description

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for Core). Supported versions that are affected are 9.2.48-9.2.50. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Global Payroll Core. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages2 packages

▶NVDoracle/peoplesoft_enterprise9.2.48 — 9.2.50

🔴Vulnerability Details

2
GHSA
GHSA-w326-rf25-93cq: Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for Core)↗2024-10-15
▶
CVEList
CVE-2024-21283: Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for Core)↗2024-10-15
▶

📋Vendor Advisories

2
Red Hat
Global Payroll for Core: From CVEorg collector↗2024-10-15
▶
Oracle
Oracle Oracle PeopleSoft Risk Matrix: Global Payroll for Core — CVE-2024-21283↗2024-10-15
▶