CVE-2026-46851
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle, affecting the security component. It allows an unauthenticated attacker with network access via HTTP to take control of the system.
Risk Assessment
An attacker could gain full control over the PeopleSoft system, leading to serious breaches of confidentiality, integrity, and availability of data.
Recommendation
It is recommended to update to the latest version of the software and implement appropriate security measures to minimize the risk of attack.
Other vulnerabilities in Security
See all- CVE-2017-7080High
An issue was discovered in certain Apple products affecting iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4. The issue involves the 'Security' component and allows remote attackers to bypass intended certificate-trust restrictions via a revoked X.509 certificate.
- CVE-2017-2535High
An issue was discovered in certain Apple products, including macOS before 10.12.5, in the 'Security' component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service via a crafted app.
- CVE-2017-2498High
An issue was discovered in certain Apple products, including iOS before 10.3.2, related to the 'Security' component. It allows attackers to bypass intended access restrictions via an untrusted certificate.
- CVE-2017-2485High
An issue was discovered in certain Apple products related to the 'Security' component. It affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted X.509 certificate file.
- CVE-2017-2451High
An issue was discovered in certain Apple products affecting iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue involves the 'Security' component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.
- CVE-2016-7662High
An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Security' component, allowing remote attackers to spoof certificates via unspecified vectors.
- CVE-2017-2423Critical
An issue was discovered in certain Apple products affecting iOS before 10.3 and macOS before 10.12.4. The issue involves the 'Security' component and allows remote attackers to bypass intended access restrictions.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise CS Campus Community. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).