CVE-2020-14564 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Environment Mgmt Console)

Back Back to CVE browser

LOW

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Environment Mgmt Console)

Published Jul 15, 2020

2.7

LOW

CVSS 3.1

EPSS 0.86%

Description

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Environment Mgmt Console). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Affected products

Vendor Oracle Corporation Product PeopleSoft Enterprise PT PeopleTools Default
n/a
- Version
  8.56
  Status
  affected
  Constraints
  -
- Version
  8.57
  Status
  affected
  Constraints
  -
- Version
  8.58
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oracle Corporation

PeopleSoft Enterprise PT PeopleTools

n/a

Version	Status	Constraints
8.56	affected	-
8.57	affected	-
8.58	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6700
Advisory
https://security.gentoo.org/glsa/202105-27
vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6700		Advisory
https://security.gentoo.org/glsa/202105-27		vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html		x_refsource_MISCPatchVendor Advisory