CVE-2010-4430: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Su...

Security readout for executives and security teams

CVE-2010-4430 is an old, poorly detailed PeopleSoft HRMS issue tied to Absence Management. The public record says a remote authenticated user could affect confidentiality, meaning someone with valid access might view sensitive HR-related information they should not see. No public source in the bundle confirms active exploitation. Exposure is most likely limited to organizations still running the named PeopleSoft HRMS 9.1 Update 2010-F environment with Absence Management enabled and accessible to authenticated users. Evidence is insufficient to identify broader versions or products. Treat this as a targeted legacy-risk check, not an emergency. Prioritize it if PeopleSoft HRMS still stores employee data in your environment, because confidentiality impact on HR records can create privacy and regulatory exposure. Mitigation focus: Review Oracle's January 2011 Critical Patch Update guidance for applicability.; Confirm whether PeopleSoft HRMS 9.1 Update 2010-F is still present.; Restrict Absence Management access to authorized HR roles only..

Prepared

Jun 27, 2026, 18:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.