CVE-2017-10061
HighSummary
Vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise, affecting versions 8.54 and 8.55, allows easy exploitation by an unauthenticated attacker with network access via HTTP. This can lead to unauthorized access to data and partial denial of service.
Risk Assessment
Attacks may significantly impact additional products, resulting in unauthorized updates, inserts, or deletions of data, as well as unauthorized read access and partial denial of service.
Recommendation
It is recommended to update to the latest version of PeopleSoft to minimize the risk associated with this vulnerability and implement appropriate security measures to restrict access to the system.
Other vulnerabilities in PeopleSoft Enterprise PeopleTools (Integration Broker)
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS