CVE-2020-14795: 
Oracle Peoplesoft Enterprise Peopletools vulnerability analysis and mitigation

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) affects versions 8.57 and 8.58. This vulnerability allows unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. The vulnerability requires human interaction from a person other than the attacker for successful exploitation (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 6.5 (Confidentiality impacts) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. This indicates that the vulnerability is network-accessible, requires low attack complexity, needs no privileges, but does require user interaction. The impact is primarily on confidentiality, with no direct impact on integrity or availability (NVD).

Successful exploitation of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. The primary impact is on the confidentiality of information, potentially exposing sensitive data to unauthorized parties (Oracle Advisory).

The vulnerability is classified as easily exploitable, requiring network access via HTTP and human interaction from a person other than the attacker. The attack requires no authentication, making it accessible to unauthenticated attackers, though successful exploitation depends on user interaction (NVD).

Oracle has released security patches for the affected versions (8.57 and 8.58) of PeopleSoft Enterprise PeopleTools as part of the October 2020 Critical Patch Update. It is strongly recommended that customers apply these security patches as soon as possible (Oracle Advisory).