CVE-2021-2455

Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Shared Components. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise HCM Shared Components accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise HCM Shared Components accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).

• https://www.oracle.com/security-alerts/cpujul2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujul2021.htmlVendor Advisory

Published

Jul 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-24544The Responsive WordPress Slider WordPress plugin through 2.2…5.4
• CVE-2021-24545The WP HTML Author Bio WordPress plugin through 1.2.0 does n…5.4
• CVE-2021-24546The Gutenberg Block Editor Toolkit – EditorsKit WordPress pl…8.8
• CVE-2021-24547The KN Fix Your Title WordPress plugin through 1.0.1 was vul…5.4
• CVE-2021-24548The Mimetic Books WordPress plugin through 0.2.13 was vulner…5.4
• CVE-2021-24549The AceIDE WordPress plugin through 2.6.2 does not sanitise …4.9
• CVE-2021-24550The Broken Link Manager WordPress plugin through 0.6.5 does …7.2
• CVE-2021-24551The Edit Comments WordPress plugin through 0.3 does not sani…9.8
• CVE-2021-24552The Simple Events Calendar WordPress plugin through 1.4.0 do…7.2
• CVE-2021-24553The Timeline Calendar WordPress plugin through 1.2 does not …7.2
• CVE-2021-24554The Paytm – Donation Plugin WordPress plugin through 1.3.2 d…7.2
• CVE-2021-24555The daac_delete_booking_callback function, hooked to the daa…8.8