cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2025-21563,https://securityvulnerability.io/vulnerability/CVE-2025-21563,Vulnerability in Oracle PeopleSoft Enterprise CC Run Control Management,"A vulnerability has been identified in the Run Control Management component of Oracle PeopleSoft Enterprise CC Common Application Objects, which could allow a low-privileged attacker with network access via HTTP to manipulate the application. This exploitation can lead to unauthorized updates, inserts, or deletions of data within some application objects, impacting the integrity of the data being processed.",Oracle,Peoplesoft Enterprise Cc Common Application Objects,4.3,MEDIUM,0.0004299999854993075,false,,false,false,false,,false,false,false,,2025-01-21T20:53:21.250Z,0 CVE-2025-21562,https://securityvulnerability.io/vulnerability/CVE-2025-21562,Low Privilege Vulnerability in Oracle PeopleSoft Enterprise CC Application,"A vulnerability exists in Oracle People's PeopleSoft Enterprise CC Common Application Objects, specifically in the Run Control Management component. This flaw allows low-privileged attackers with network access via HTTP to exploit the system. Successful exploitation can lead to unauthorized read access to a portion of the accessible data within the PeopleSoft system, which can have implications for data confidentiality. Consequently, organizations using this version should take measures to mitigate potential breaches and secure their applications.",Oracle,Peoplesoft Enterprise Cc Common Application Objects,4.3,MEDIUM,0.0004299999854993075,false,,false,false,false,,false,false,false,,2025-01-21T20:53:20.855Z,0 CVE-2024-21264,https://securityvulnerability.io/vulnerability/CVE-2024-21264,Low-privileged attacker can compromise data in PeopleSoft Enterprise CC Common Application Objects,"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Activity Guide Composer). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise CC Common Application Objects accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CC Common Application Objects accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).",Oracle,Peoplesoft Enterprise Cc Common Application Objects,5.4,MEDIUM,0.00044999999227002263,false,,false,false,false,,,false,false,,2024-10-15T19:52:55.591Z,0 CVE-2023-22090,https://securityvulnerability.io/vulnerability/CVE-2023-22090,Vulnerability in PeopleSoft Enterprise CC and Oracle,"The vulnerability in Oracle's PeopleSoft Enterprise CC Common Application Objects product affects version 9.2 and allows a low-privileged attacker to exploit network access via HTTP. This flaw can lead to unauthorized access to sensitive data, posing significant risks of data breaches and compromising the integrity of the affected system. Organizations using this product must take immediate action to mitigate the risks associated with this vulnerability.",Oracle,Peoplesoft Enterprise Cc Common Application Objects,6.5,MEDIUM,0.0004299999854993075,false,,false,false,false,,,false,false,,2023-10-17T22:15:00.000Z,0 CVE-2022-39406,https://securityvulnerability.io/vulnerability/CVE-2022-39406,Vulnerability in Oracle People's Approval Framework Component,"The vulnerability affects Oracle's PeopleSoft Enterprise Common Components, specifically the Approval Framework component. It allows a low-privileged attacker with network access to compromise system integrity through easily exploitable means. Successful exploitation may result in unauthorized creation, deletion, or modification of critical data, ultimately granting attackers access to all accessible data within the PeopleSoft system. This raises significant security concerns, emphasizing the need for prompt remediation.",Oracle,Peoplesoft Enterprise Cc Common Application Objects,8.1,HIGH,0.00044999999227002263,false,,false,false,false,,,false,false,,2022-10-18T00:00:00.000Z,0 CVE-2021-35543,https://securityvulnerability.io/vulnerability/CVE-2021-35543,Unauthorized Access Vulnerability in Oracle PeopleSoft's Activity Guide Composer,"A vulnerability exists in Oracle PeopleSoft's Activity Guide Composer that allows low privileged attackers to exploit it via HTTP. This easily exploitable flaw enables unauthorized creation, deletion, or modification of sensitive data within the PeopleSoft Enterprise CC Common Application Objects. As a result, attackers may gain unauthorized access to critical data across the platform, which poses significant risks to the integrity and confidentiality of the system. Organizations using the affected version should prioritize mitigation strategies to safeguard their data.",Oracle,Peoplesoft Enterprise Cc Common Application Objects,8.1,HIGH,0.0009399999980814755,false,,false,false,false,,,false,false,,2021-10-20T10:49:56.000Z,0 CVE-2020-2695,https://securityvulnerability.io/vulnerability/CVE-2020-2695,Unauthorized Data Access Vulnerability in Oracle PeopleSoft Enterprise CC Common Application Objects,"An exploitation risk exists within Oracle PeopleSoft Enterprise CC Common Application Objects, specifically in the Approval Framework component. This vulnerability allows an unauthenticated attacker to access the application over HTTP, potentially leading to unauthorized read access to sensitive data. The affected versions 9.1 and 9.2 are susceptible, necessitating swift action to secure impacted installations to mitigate potential risks.",Oracle,Peoplesoft Enterprise Cc Common Application Objects,5.3,MEDIUM,0.0008900000248104334,false,,false,false,false,,,false,false,,2020-01-15T16:34:07.000Z,0 CVE-2019-2419,https://securityvulnerability.io/vulnerability/CVE-2019-2419,,"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects component of Oracle PeopleSoft Products (subcomponent: Form and Approval Builder). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise CC Common Application Objects, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise CC Common Application Objects accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CC Common Application Objects accessible data. Note: This Enterprise Common Component is used by all PeopleSoft Application products. Please refer to the MOS Note Doc ID 2493366.1 for patch information. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).",Oracle,Peoplesoft Enterprise Cc Common Application Objects,5.4,MEDIUM,0.0005499999970197678,false,,false,false,false,,,false,false,,2019-01-16T19:00:00.000Z,0