CVE-2023-22014

Summary

CVE-2023-22014 is a newly identified vulnerability affecting Oracle PeopleSoft's PeopleTools component, specifically versions 8.59 and 8.60 of the portal. This issue, with a base score of 8.4, is considered easily exploitable and allows unauthenticated attackers to compromise the PeopleSoft Enterprise PeopleTools. Successful attacks could lead to the takeover of these systems, posing significant risks to confidentiality, integrity, and availability. The vulnerability is logon-authentication bypass, and its exploitation does not require user interaction, making it a serious concern for organizations running the affected versions of PeopleTools infrastructure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.