CVE-2019-2591

CVE-2019-2591 is a medium-severity vulnerability affecting the Candidate Gateway subcomponent of Oracle PeopleSoft Enterprise HRMS version 9.2. This easily exploitable flaw allows an unauthenticated attacker, with network access via HTTP, to compromise the system. Successful exploitation requires user interaction and can lead to unauthorized read, update, insert, or delete access to a subset of HRMS data, potentially impacting additional products. Despite its potential impact, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.