Lucene search

K
cveOracleCVE-2016-3435
HistoryApr 21, 2016 - 11:00 a.m.

CVE-2016-3435

2016-04-2111:00:26
oracle
web.nvd.nist.gov
24
cve-2016-3435
vulnerability
peoplesoft
enterprise
peopletools
oracle
products
pia
core technology
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L

AI Score

5

Confidence

High

EPSS

0.001

Percentile

45.4%

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect availability via vectors related to PIA Core Technology.

Affected configurations

Nvd
Node
oraclepeoplesoft_enterprise_peopletoolsMatch8.53
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.54
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.55
VendorProductVersionCPE
oraclepeoplesoft_enterprise_peopletools8.53cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*
oraclepeoplesoft_enterprise_peopletools8.54cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*
oraclepeoplesoft_enterprise_peopletools8.55cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L

AI Score

5

Confidence

High

EPSS

0.001

Percentile

45.4%

Related for CVE-2016-3435