CVE-2014-0380 — Oracle Peoplesoft Products vulnerability

6 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.5%
top 33.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Peoplesoft Products
Timeline
PublishedJan 15
Latest updateMay 17

Description

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors related to MultiChannel Framework (MCF).

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/peoplesoft_products8.52, 8.53+1

🔴Vulnerability Details

2
GHSA
GHSA-wfv4-m363-293g: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8↗2022-05-17
▶
CVEList
CVE-2014-0380: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8↗2014-01-15
▶

💬Community

3
Bugzilla
CVE-2014-0508 flash-plugin: information disclosure flaw (APSB14-09)↗2014-04-09
▶
Bugzilla
CVE-2014-0509 flash-plugin: cross-site scripting flaw (APSB14-09)↗2014-04-09
▶
Bugzilla
CVE-2014-0506 CVE-2014-0507 flash-plugin: two flaws leading to code execution (APSB14-09)↗2014-04-09
▶
CVE-2014-0380 — Oracle vulnerability | cvebase