Oracle PeopleSoft HCM Human Resources Employee Snapshot Component Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability has been identified in the Oracle PeopleSoft Enterprise HCM Human Resources product, specifically within the Employee Snapshot component, version 9.2. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise the application. Exploitation of this vulnerability requires human interaction from a third party. While the issue resides in PeopleSoft Enterprise HCM Human Resources, its effects may extend to other products. Successful exploitation could lead to unauthorized read access to certain data, as well as unauthorized updates, inserts, or deletions of accessible data within the application.

Impact

Exploitation of this vulnerability could result in unauthorized access to read, modify, insert, or delete data within the PeopleSoft Enterprise HCM Human Resources application.