5 matches found
CVE-2023-21844
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Elastic Search. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2023-21844
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Elastic Search. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2023-21844
...
CVE-2023-21844
CVE-2023-21844 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Elastic Search component in versions 8.59–8.60. The root cause is insufficient input validation in Elastic Search, enabling a low-privilege, network-accessible attacker (HTTP) to cause unauthorized update/insert/del...
