Lucene search
PRIOn knowledge basePRION:CVE-2018-3198HistoryOct 17, 2018 - 1:31 a.m.
Code injection
2018-10-1701:31:00
PRIOn knowledge base
www.prio-n.com
3
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
| CPE | Name | Operator | Version |
|---|---|---|---|
| peoplesoft_enterprise_peopletools | eq | 8.55 | |
| peoplesoft_enterprise_peopletools | eq | 8.56 | |
| peoplesoft_enterprise_peopletools | eq | 8.57 |
Related
cve
cve
CVE-2018-3198
2018-10-17 01:31:22
cvelist
cvelist
CVE-2018-3198
2018-10-17 01:00:00
nvd
nvd
CVE-2018-3198
2018-10-17 01:31:22
f5
f5
K42534513 : Multiple PeopleSoft Enterprise PeopleTools vulnerabilities
2020-04-28 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00