Non notée

CVE-2017-10306 Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security)

Description

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).

Produits et versions touchés

Produit	Versions touchées	Corrigé en
PeopleSoft Enterprise HCM Human Resources	9.2	Pas de correctif indiqué

Références

1039598 www.securitytracker.com
www.oracle.com www.oracle.com
101478 www.securityfocus.com

Chronologie

Publiée 19 octobre 2017
Dernière modification 4 octobre 2024

Les 16 CVE de PeopleSoft Enterprise HCM Human Resources →

CVE-2026-83375 Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer… 6.0 Moyenne CVE-2026-60668 Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: French Public… 8.2 Élevée CVE-2026-60667 Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Core) 7.4 Élevée CVE-2026-60666 Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Security) 6.8 Moyenne

Suivre cette CVE