CVE-2021-35568: 
Oracle Peoplesoft Enterprise Peopletools vulnerability analysis and mitigation

A vulnerability was identified in Oracle PeopleSoft Enterprise PeopleTools (component: Rich Text Editor) affecting versions 8.57, 8.58, and 8.59. The vulnerability allows unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, requiring human interaction from a person other than the attacker (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 6.1 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. This indicates network accessibility, low attack complexity, no privileges required, user interaction required, changed scope, and low impact on both confidentiality and integrity with no impact on availability (Oracle Advisory).

Successful exploitation of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data, as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data (Oracle Advisory).

Oracle has released security patches to address this vulnerability as part of the October 2021 Critical Patch Update. It is strongly recommended that customers apply these security patches as soon as possible (Oracle Advisory).