CVE-2021-2407

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-240707.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-240715.3Microsoft SharePoint Information Disclosure VulnerabilityCVE-2021-240728.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-240736.5Skype for Business and Lync Spoofing VulnerabilityCVE-2021-240749.8Windows TCP/IP Remote Code Execution VulnerabilityCVE-2021-240756.8Microsoft Windows VMSwitch Denial of Service VulnerabilityCVE-2021-240765.5Microsoft Windows VMSwitch Information Disclosure VulnerabilityCVE-2021-240779.8Windows Fax Service Remote Code Execution VulnerabilityCVE-2021-240789.8Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-240795.5Windows Backup Engine Information Disclosure VulnerabilityCVE-2021-24086.1Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Notification Configuration). The supporteCVE-2021-240806.5Windows Trust Verification API Denial of Service Vulnerability
CVE-2021-2407: Medium severity, CVSS 5.3 | Vulnix