Oracle PeopleSoft Enterprise Cs Sa Integration Pack vulnerabilities

3 CVEs affecting Oracle PeopleSoft Enterprise Cs Sa Integration Pack, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-21300, published 2022-01-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10219, published 2019-11-08. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions.…
CVE-2022-21300, published 2022-01-19. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Snapshot Integration). Supported versions that are affected are 9.0 and 9.2. Easily…
CVE-2021-35601, published 2021-10-20. Medium severity, CVSS 5.7. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Students Administration). Supported versions that are affected are 9.0 and 9.2. Easily…