CVE-2021-2377

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2021-2377

Oracle PeopleSoft Enterprise PeopleTools SQR vulnerability (CVE-2021-2377) affects PeopleSoft/PT PeopleTools versions 8.57–8.59. The root cause is a security weakness in the SQR component that allows a low-privilege, network-authenticated attacker (via HTTP) to read a subset of data. CVSS 3.1 bas...