CVE-2013-3821
published 2013-07-17CVE-2013-3821: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to…
PriorityP273medium6.4CVSS 2.0
AVNACLAuNCPINAP
ITWVulnCheck KEV
Exploited in the wild
EPSS
6.90%
94.1th percentile
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Integration Broker.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | peoplesoft_products | — | — |
| oracle | peoplesoft_products | — | — |
| oracle | peoplesoft_products | — | — |
CVSS provenance
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P
vulncheck6.4MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gpp2-24hp-pgpg: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8
ghsa_unreviewed·2022-05-17
CVE-2013-3821 [MEDIUM] GHSA-gpp2-24hp-pgpg: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Integration Broker.
VulnCheck
PeopleSoft Enterprise PeopleTools Component Unspecified Vulnerability
vulncheck·2013·CVSS 6.4
CVE-2013-3821 [MEDIUM] PeopleSoft Enterprise PeopleTools Component Unspecified Vulnerability
PeopleSoft Enterprise PeopleTools Component Unspecified Vulnerability
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Integration Broker.
Affected: Oracle peoplesoft_products
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://kevintel.com/CVE-2013-3821
No detection rules found.
No public exploits indexed.
Hackernews
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
blogs_hackernews·2026-08-10
CVE-2026-34348 ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the default.
That pretty much covers the mood this week. Old bugs are back, supply chains are getting stranger, and some exploit paths are so short you wonder what was supposed to stop them in the first place.
That’s only part of it. Here’s everything else that made the Monday recap.
## ⚡ Threat of the Week
Anthropic's Model Attempts to Poison Open-Source Project — A new evaluati
Rapid7
Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)
blogs_rapid7·2026-06-12·CVSS 9.8
CVE-2026-35273 [CRITICAL] Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)
## Overview
On June 10, 2026, Oracle published a security alert for CVE-2026-35273 , a critical vulnerability in the Updates Environment Management component of PeopleSoft Enterprise PeopleTools. Oracle released an out-of-band patch the same day as the advisory, underscoring the urgency of remediation. The vulnerability has a CVSSv3.1 score of 9.8 and is remotely exploitable without authentication. Per the vendor advisory, successful exploitation may result in remote code execution (RCE). TrendAI has classified the underlying flaw as a server-side request forgery ( CWE-918 ). PeopleTools versions 8.61 and 8.62 are affected.
CVE-2026-35273 was reported to Oracle through TrendAI's Zero Day Initiative. According to a report published by Mandiant on June 11, 2026, this vulnerability has been
http://osvdb.org/95292http://secunia.com/advisories/54233http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.htmlhttp://www.securityfocus.com/bid/61221https://exchange.xforce.ibmcloud.com/vulnerabilities/85679http://osvdb.org/95292http://secunia.com/advisories/54233http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.htmlhttp://www.securityfocus.com/bid/61221https://exchange.xforce.ibmcloud.com/vulnerabilities/85679
2013-07-17
Published
Exploited in the wild