Oracle PeopleSoft FIN eSettlements Vulnerability Allows Unauthorized Data Access and Modification

A vulnerability exists in the PeopleSoft Enterprise FIN eSettlements product, specifically in version 9.2. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise the application. Exploitation of this vulnerability could lead to unauthorized read, update, insert, or delete access to certain accessible data within the eSettlements component.

Impact

Successful exploitation can result in unauthorized access to read, update, insert, or delete data within the PeopleSoft Enterprise FIN eSettlements application.

Remediation

Users are advised to apply the January 2025 Critical Patch Update, which includes a patch for this vulnerability.