CVE-2011-2272: Medium severity oracle peoplesoft enterprise financial management suite (fms) vulnerability

Published Jul 21, 2011

Updated

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.0, Bundle, #36, 9.1, Bundle, and #13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to eProcurement.

Affected Software

4 affected components

Oracle PeopleSoft Enterprise FSCM=9.0-bundle36

Oracle PeopleSoft Enterprise FSCM=9.1-bundle13

Oracle PeopleSoft Products=9.0-bundle36

Oracle PeopleSoft Products=9.1-bundle13

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 21, 2011

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2272?

CVE-2011-2272 is considered a moderate severity vulnerability impacting confidentiality and integrity.

How do I fix CVE-2011-2272?

To fix CVE-2011-2272, apply the latest security patches provided by Oracle for the affected PeopleSoft versions.

Who is affected by CVE-2011-2272?

CVE-2011-2272 affects remote authenticated users of Oracle PeopleSoft Products version 9.0 Bundle #36 and 9.1 Bundle #13.

What components are impacted by CVE-2011-2272?

CVE-2011-2272 impacts the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products.

What types of vulnerabilities does CVE-2011-2272 include?

CVE-2011-2272 includes unspecified vulnerabilities related to eProcurement that could be exploited via unknown vectors.