CVE

Id
100112  
CVE No.
CVE-2017-3292  
Status
Candidate  
Description
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 5.7 (Confidentiality impacts).  
Phase
Assigned (20161206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
803916 100112 CVE-2017-3292 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html  View
803917 100112 CVE-2017-3292 BID:95502  View
803918 100112 CVE-2017-3292 URL:http://www.securityfocus.com/bid/95502  View
803919 100112 CVE-2017-3292 SECTRACK:1037634  View

Related JVN