CVE-2019-2439

CVE-2019-2439 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.55, 8.56, and 8.57, specifically affecting the Portal subcomponent. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require user interaction and can lead to unauthorized read, update, insert, or delete access to a subset of PeopleSoft data, potentially impacting other products. The vulnerability has a CVSS 3.0 Base Score of 6.1 (Medium), indicating a moderate risk. The attack vector is network-based (AV:N), with low attack complexity (AC:L), and requires user interaction (UI:R). While the impact on confidentiality and integrity is low (C:L, I:L), the scope is changed (S:C), meaning the vulnerability in one component can affect others. There is currently no evidence of active exploitation, nor are there publicly available exploit codes in Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention.