Oracle PeopleSoft HCM Global Payroll Core Unauthorized Data Access Vulnerability

A vulnerability exists in Oracle PeopleSoft Enterprise HCM Global Payroll Core, specifically in the Global Payroll for Core component, affecting versions 9.2.51 and 9.2.52. This vulnerability allows low-privileged attackers with network access via HTTP to compromise the application. Successful exploitation could lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible within PeopleSoft Enterprise HCM Global Payroll Core.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all data within PeopleSoft Enterprise HCM Global Payroll Core, along with the ability to unauthorizedly create, delete, or modify critical data.