CVE-2024-21154

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Human Resources). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:peoplesoft_enterprise_hcm_human_resources:9.2:*:*:*:*:*:*:*

History

17 Jun 2025, 20:01

Type Values Removed Values Added
First Time Oracle
Oracle peoplesoft Enterprise Hcm Human Resources
CPE cpe:2.3:a:oracle:peoplesoft_enterprise_hcm_human_resources:9.2:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 4.3
v2 : unknown
v3 : unknown
References () https://www.oracle.com/security-alerts/cpujul2024.html - () https://www.oracle.com/security-alerts/cpujul2024.html - Vendor Advisory

16 Jul 2024, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-16 23:15

Updated : 2025-06-17 20:01


NVD link : CVE-2024-21154

Mitre link : CVE-2024-21154


JSON object : View

Products Affected

oracle

  • peoplesoft_enterprise_hcm_human_resources
CWE

No CWE.