๐Ÿ” CVE Alert

CVE-2022-39407

MEDIUM 5.5
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.58, 8.59 and 8.60. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Vendor oracle corporation
Product peoplesoft enterprise pt peopletools
Published Oct 18, 2022
Last Updated Sep 23, 2024
Stay Ahead of the Next One

Get instant alerts for oracle corporation peoplesoft enterprise pt peopletools

Be the first to know when new medium vulnerabilities affecting oracle corporation peoplesoft enterprise pt peopletools are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Affected Versions

Oracle Corporation / PeopleSoft Enterprise PT PeopleTools
8.58 8.59 8.60

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
oracle.com: https://www.oracle.com/security-alerts/cpuoct2022.html