Not rated
CVE-2018-3072 Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway)
Description
Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft HRMS. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft HRMS accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PeopleSoft Enterprise HCM Candidate Gateway | 9.2 | No fix stated |
Other CVEs of PeopleSoft Enterprise HCM Candidate Gateway
The 4 CVEs of PeopleSoft Enterprise HCM Candidate Gateway →
CVE-2021-2404
Vulnerability in the PeopleSoft Enterprise HCM Candidate Gateway product of Oracle PeopleSoft (component: e-mail…
6.5
Medium
CVE-2020-2954
Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft (component: Candidate Gateway)
6.1
Medium
CVE-2019-2591
Vulnerability in the PeopleSoft Enterprise HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate…
Not rated