CVE-2019-10219

The CVE-2019-10219 entry affects Hibernate Validator: SafeHtml validator annotation fails to sanitize HTML comments/instructions, enabling XSS in affected code paths. Affected CP4S versions are 1.7.2.0, 1.8.0.0, and 1.8.1.0. Remediation is to upgrade to Cloud Pak for Security 1.9.0.0 per IBM guid...

CVE-2022-21300

CVE-2022-21300 affects Oracle PeopleSoft CS SA Integration Pack (Snapshot Integration) in PeopleSoft 9.0 and 9.2. An unauthenticated attacker with network access via HTTP can compromise the pack, potentially exposing or accessing data. CVSS 3.1 base score is 7.5 (high), with confidentiality impac...

CVE-2021-35601

CVE-2021-35601 affects Oracle PeopleSoft Enterprise CS SA Integration Pack (component: Students Administration); vulnerable on PeopleSoft 9.0 and 9.2. The root cause is exposure through the physical network segment attached to the hardware hosting the CS SA Integration Pack, allowing a low-privil...