Executive Summary

This vulnerability exists in the PeopleSoft Enterprise HCM Human Resources product, specifically in the Job Profile Manager component. It affects version 9.2 and can be exploited by a high privileged attacker who has network access via HTTP.

The vulnerability allows such an attacker to compromise the system by unauthorized creation, deletion, or modification of critical data or any data accessible within PeopleSoft Enterprise HCM Human Resources.

Useful 0 Not Useful 0

Impact Analysis

Successful exploitation of this vulnerability can lead to unauthorized access to critical data or complete access to all data accessible within PeopleSoft Enterprise HCM Human Resources.

This means an attacker could create, delete, or modify important data without permission, potentially causing data integrity issues and compromising confidentiality.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows a high privileged attacker with network access to compromise PeopleSoft Enterprise HCM Human Resources, potentially leading to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all accessible data.

Such unauthorized access and modification of sensitive data could negatively impact compliance with data protection standards and regulations like GDPR and HIPAA, which require strict controls over the confidentiality and integrity of personal and sensitive information.

Useful 0 Not Useful 0