CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/23 2:42 a.m.•4 views

CVE-2023-21844

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Elastic Search. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

5.4CVSS5.9AI score0.00377EPSS

Exploits0References1

OSV•added 2023/01/18 12:15 a.m.•4 views

CVE-2023-21844

5.4CVSS7.3AI score0.00377EPSS

Exploits0References1

CVE•added 2023/01/17 11:35 p.m.•67 views

CVE-2023-21844

CVE-2023-21844 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Elastic Search component in versions 8.59–8.60. The root cause is insufficient input validation in Elastic Search, enabling a low-privilege, network-accessible attacker (HTTP) to cause unauthorized update/insert/del...

5.4CVSS4.9AI score0.00377EPSS

Exploits0References1Affected Software1