CVE-2011-2280: Medium severity oracle peopletools vulnerability

Published Jul 21, 2011

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2011-2274.

Affected Software

6 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.49.31

Oracle PeopleSoft Enterprise PeopleTools=8.50.20

Oracle PeopleSoft Enterprise PeopleTools=8.51.11

Oracle PeopleSoft Products=8.49.31

Oracle PeopleSoft Products=8.50.20

Oracle PeopleSoft Products=8.51.11

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 21, 2011

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2280?

CVE-2011-2280 is classified as a vulnerability that allows remote authenticated users to potentially affect the integrity of the system.

How do I fix CVE-2011-2280?

To remediate CVE-2011-2280, users should update to the latest version of Oracle PeopleSoft Products or PeopleTools as recommended by Oracle.

Which versions are affected by CVE-2011-2280?

CVE-2011-2280 affects Oracle PeopleSoft Products and PeopleTools versions 8.49.31, 8.50.20, and 8.51.11.

What are the potential impacts of CVE-2011-2280?

The vulnerability in CVE-2011-2280 could allow unauthorized integrity changes made by remote authenticated users.

Is there a workaround for CVE-2011-2280?

Currently, there is no specified workaround for CVE-2011-2280; upgrading the software is the recommended approach.