PT-2025-16468 · Oracle · Peoplesoft Enterprise Cc Common Application Objects
CVE-2025-30735
·
Publicado
2025-04-15
·
Atualizado
2025-04-16
CVSS v2.0
8.5
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
PeopleSoft Enterprise CC Common Application Objects version 9.2
Description
The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks can result in unauthorized creation, deletion, or modification access to critical data or all accessible data, as well as unauthorized access to critical data or complete access to all accessible data.
Recommendations
For version 9.2, update to a version that includes the fix for this issue, as the current version is easily exploitable and can lead to significant data breaches. As a temporary workaround, consider restricting access to the Page and Field Configuration component to minimize the risk of exploitation.
Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Peoplesoft Enterprise Cc Common Application Objects