Lucene search

OracleCVE-2022-39406

HistoryOct 18, 2022 - 9:15 p.m.

CVE-2022-39406

2022-10-1821:15:15

oracle

web.nvd.nist.gov

oracle

peoplesoft

enterprise common components

cve-2022-39406

vulnerability

security

http

cvss 3.1

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

26.8%

JSON

Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft (component: Approval Framework). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise Common Components. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise Common Components accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise Common Components accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

Affected configurations

Nvd

Vulners

Node

oraclepeoplesoft_enterprise_common_componentsMatch9.2

VendorProductVersionCPE
oraclepeoplesoft_enterprise_common_components9.2cpe:2.3:a:oracle:peoplesoft_enterprise_common_components:9.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	peoplesoft_enterprise_common_components	9.2	cpe:2.3:a:oracle:peoplesoft_enterprise_common_components:9.2:::::::*

CNA Affected

[
  {
    "vendor": "Oracle Corporation",
    "product": "PeopleSoft Enterprise CC Common Application Objects",
    "versions": [
      {
        "version": "9.2",
        "status": "affected"
      }
    ]
  }
]

References

www.oracle.com/security-alerts/cpuoct2022.html

Social References

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

26.8%

JSON

Related for CVE-2022-39406