CVE-2021-2219

CVE-2021-2219 affects Oracle PeopleSoft Enterprise PeopleTools, SQR component, versions 8.56–8.58. Low-privilege, network-access exploit via HTTP can lead to unauthorized data updates/reads and partial DoS. CVSS v3.1 base score 7.4. Oracle CPU April 2021 includes patches; apply the update to miti...