vulnerability
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
CriticalCVSS 9.8KEVEPSS 97%
Summary
A zero-day vulnerability in Oracle PeopleSoft, exploited by the ShinyHunters group since May, has been revealed to involve three chained flaws. Mandiant reported a subsequent, larger wave of attacks targeting various sectors, including education and technology, and recommends immediate patching or disabling the Environment Management Hub to mitigate the risk of data theft and extortion.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data