Oracle PeopleSoft Absence Management Unauthorized Data Access Vulnerability

A vulnerability exists in Oracle PeopleSoft Enterprise HCM Absence Management version 9.2, within the Absence Management component. This easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise the application. Successful exploitation could lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible within PeopleSoft Enterprise HCM Absence Management.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all data within PeopleSoft Enterprise HCM Absence Management, along with the ability to create, delete, or modify critical data.