CVE-2011-2278: Medium severity oracle peoplesoft hrms vulnerability

Published Jul 21, 2011

Updated

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9, Bundle, #24, 9.0, Bundle, #17, 9.1, Bundle, and #6 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager.

Affected Software

6 affected components

Oracle PeopleSoft Enterprise HRMS=9.0-bundle17

Oracle PeopleSoft Products=8.9-bundle24

Oracle PeopleSoft Products=9.1-bundle6

Oracle PeopleSoft Enterprise HRMS=9.1-bundle6

Oracle PeopleSoft Products=9.0-bundle17

Oracle PeopleSoft Enterprise HRMS=8.9-bundle24

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 21, 2011

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2278?

The severity of CVE-2011-2278 is considered to be moderate, as it allows remote authenticated users to potentially affect confidentiality.

How do I fix CVE-2011-2278?

To fix CVE-2011-2278, it is recommended to apply the latest patches and updates provided by Oracle for the affected PeopleSoft versions.

Which versions are affected by CVE-2011-2278?

CVE-2011-2278 affects Oracle PeopleSoft Products versions 8.9, 9.0, and 9.1, specifically the bundles mentioned in the vulnerability details.

Who can exploit CVE-2011-2278?

CVE-2011-2278 can be exploited by remote authenticated users, as the vulnerability requires authentication.

What component is involved in CVE-2011-2278?

CVE-2011-2278 involves the PeopleSoft Enterprise HRMS component, specifically related to the Talent Acquisition Manager.