CVE-2024-21180: 
Oracle Peoplesoft Enterprise Peopletools vulnerability analysis and mitigation

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Supported versions that are affected are 8.59, 8.60 and 8.61. This vulnerability allows low privileged attackers with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools (Oracle CPU).

The vulnerability requires human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. The vulnerability has been assigned a CVSS Base Score of 4.1 MEDIUM (Confidentiality impacts) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N (Oracle CPU).

Successful exploitation of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data (Oracle CPU).

The vulnerability is easily exploitable by a low privileged attacker with network access via HTTP. However, successful exploitation requires human interaction from a person other than the attacker (Oracle CPU).

Oracle strongly recommends that customers apply Critical Patch Update security patches as soon as possible. The patches are available through Oracle's Critical Patch Update program for product versions covered under Premier Support or Extended Support phases of the Lifetime Support Policy (Oracle CPU).