CVE-2011-2274: Low severity oracle peoplesoft products vulnerability

Published Jul 21, 2011

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2011-2280.

Affected Software

10 affected components

Oracle PeopleSoft Products=8.51.11

Oracle PeopleSoft Enterprise PeopleTools=8.51.11

Oracle PeopleSoft Products=8.49.32

Oracle PeopleSoft Enterprise PeopleTools=8.49.32

Oracle PeopleSoft Products=8.49.31

Oracle PeopleSoft Enterprise PeopleTools=8.50.20

Oracle PeopleSoft Enterprise PeopleTools=8.49.31

Oracle PeopleSoft Products=8.50.20

Oracle PeopleSoft Enterprise PeopleTools=8.50.21

Oracle PeopleSoft Products=8.50.21

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 21, 2011

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2274?

The severity of CVE-2011-2274 is not explicitly rated but involves potential integrity issues for remote authenticated users.

How do I fix CVE-2011-2274?

To fix CVE-2011-2274, organizations should apply available patches from Oracle for affected PeopleSoft versions.

What versions of Oracle PeopleSoft are affected by CVE-2011-2274?

CVE-2011-2274 affects Oracle PeopleSoft Enterprise PeopleTools versions 8.49.31, 8.49.32, 8.50.20, 8.50.21, and 8.51.11.

Can unprivileged users exploit CVE-2011-2274?

No, CVE-2011-2274 requires the attacker to be a remote authenticated user to exploit the vulnerability.

What type of vulnerability is CVE-2011-2274?

CVE-2011-2274 is an unspecified vulnerability that affects the integrity of the Oracle PeopleSoft products.