CVE-2017-10351Sensitive Information Exposure in Corporation Peoplesoft Enterprise PT Peopletools

Severity
6.2MEDIUMNVD
EPSS
0.2%
top 59.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 19
Latest updateMay 17

Description

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PT PeopleTools executes to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complet

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.5 | Impact: 3.6

Affected Packages2 packages

Patches

🔴Vulnerability Details

2
GHSA
GHSA-rch6-9xg6-rcx4: Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server)2022-05-17
CVEList
CVE-2017-10351: Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server)2017-10-19

💬Community

1
Bugzilla
CVE-2017-17760 opencv: Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp2018-01-03
CVE-2017-10351 — Sensitive Information Exposure | cvebase