Code injection

2017-04-2419:59:00

PRIOn knowledge base

www.prio-n.com

3.6 Low

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.1%

JSON

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54 and 8.55. Easily “exploitable” vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

CPENameOperatorVersion
peoplesoft_enterprise_peopletoolseq8.54
peoplesoft_enterprise_peopletoolseq8.55

CPE	Name	Operator	Version
	peoplesoft_enterprise_peopletools	eq	8.54
	peoplesoft_enterprise_peopletools	eq	8.55

References

www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html

www.securityfocus.com/bid/97874

www.securitytracker.com/id/1038301