Peoplesoft Enterprise Fin Staffing Front Office
Monthly
Unauthorized data modification in Oracle PeopleSoft Enterprise FIN Staffing Front Office 9.2 allows a remote, unauthenticated attacker to create, delete, or modify critical data via crafted HTTP requests. The flaw is confined to the Staffing Front Office component and carries an integrity-only impact (CVSS 3.1 7.5, C:N/I:H/A:N). No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV.
Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
Unauthorized data modification in Oracle PeopleSoft Enterprise FIN Staffing Front Office 9.2 allows a remote, unauthenticated attacker to create, delete, or modify critical data via crafted HTTP requests. The flaw is confined to the Staffing Front Office component and carries an integrity-only impact (CVSS 3.1 7.5, C:N/I:H/A:N). No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV.
Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.