CVE-2021-2071: 
Oracle Peoplesoft Enterprise Peopletools vulnerability analysis and mitigation

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search) affects supported versions 8.56, 8.57 and 8.58. This is a difficult to exploit vulnerability that allows unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 8.1 (High) with the vector string: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. This indicates the vulnerability has high impacts on confidentiality, integrity, and availability, requires no privileges or user interaction, but is difficult to exploit (Oracle Advisory).

Successful exploitation of this vulnerability can result in complete takeover of PeopleSoft Enterprise PeopleTools, potentially compromising the confidentiality, integrity, and availability of the system (Oracle Advisory).

The vulnerability is difficult to exploit and requires network access via HTTP. No authentication is required for exploitation, though the high attack complexity provides some mitigation (Oracle Advisory).

Oracle has released patches for affected versions (8.56, 8.57, and 8.58) as part of the January 2021 Critical Patch Update. Organizations are strongly recommended to apply these security patches as soon as possible (Oracle Advisory).