CVE-2021-2044

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise FIN Payables version 9.2

Description: The issue is related to insufficient input validation in the Financial Sanctions component. It allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables, resulting in unauthorized access to critical data or complete access to all accessible data.

Recommendations: For version 9.2, update to a version that includes the fix for this issue, as the current version is easily exploitable and allows attackers to access critical data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.