How severe is CVE-2024-21154?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.3 out of 10.

What type of vulnerability is CVE-2024-21154?

This is classified as CWE-79, which is a common weakness in software security.

CVE-2024-21154 - MEDIUM Severity | CVSS 4.3

Vulnerability Description

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Human Resources). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Related Vulnerabilities

CVE-2010-3243

MEDIUM

CVSS:4.3(Medium)

Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2 and Office SharePoint...

CWE-792010

CVE-2016-7823

MEDIUM

CVSS:4.3(Medium)

Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-792016

CVE-2018-1136

MEDIUM

CVSS:4.3(Medium)

An issue was discovered in Moodle 3.x. An authenticated user is allowed to add HTML blocks containing scripts to their Dashboard; this is normally not a security issue because a personal dashboard is ...

CWE-792018

CVE-2018-21095

MEDIUM

CVSS:4.3(Medium)

Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210.

CWE-792018

CVE-2018-5172

MEDIUM

CVSS:4.3(Medium)

The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site ...

CWE-792018

CVE-2018-6051

MEDIUM

CVSS:4.3(Medium)

XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a cra...

CWE-792018