CVE-2017-10338
HighSummary
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal) allows unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
Risk Assessment
Attacks may result in unauthorized access to data and the ability to update, insert, or delete data, posing a serious threat to the integrity and confidentiality of data within the organization.
Recommendation
It is recommended to update to the latest version of Oracle PeopleSoft software and implement additional security measures to mitigate the risk of exploitation of this vulnerability.
Other vulnerabilities in PeopleSoft Enterprise PRTL Interaction Hub
See all- CVE-2026-83070High
Vulnerability in Oracle's PeopleSoft Enterprise PRTL Interaction Hub (component: Enterprise Portal) affects version 9.1. A low-privileged attacker can exploit it over HTTP, leading to unauthorized access to critical data or all accessible data. Attacks may also impact additional products (scope change).
- CVE-2017-10354High
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal) allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction, potentially leading to unauthorized access to critical data.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).