Lucene search

K
cveOracleCVE-2024-21180
HistoryJul 16, 2024 - 11:15 p.m.

CVE-2024-21180

2024-07-1623:15:22
oracle
web.nvd.nist.gov
32
cve-2024-21180
oracle peoplesoft
enterprise peopletools
opensearch dashboards
vulnerability
http
compromise
confidentiality impacts

CVSS3

4.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

AI Score

3

Confidence

High

EPSS

0

Percentile

14.4%

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N).

Affected configurations

Nvd
Vulners
Node
oraclepeoplesoft_enterprise_peopletoolsMatch8.59
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.60
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.61
VendorProductVersionCPE
oraclepeoplesoft_enterprise_peopletools8.59cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*
oraclepeoplesoft_enterprise_peopletools8.60cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.60:*:*:*:*:*:*:*
oraclepeoplesoft_enterprise_peopletools8.61cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.61:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "Oracle Corporation",
    "product": "PeopleSoft Enterprise PT PeopleTools",
    "versions": [
      {
        "version": "8.59",
        "status": "affected"
      },
      {
        "version": "8.60",
        "status": "affected"
      },
      {
        "version": "8.61",
        "status": "affected"
      }
    ]
  }
]

CVSS3

4.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

AI Score

3

Confidence

High

EPSS

0

Percentile

14.4%

Related for CVE-2024-21180