CVE-2013-5909: Medium severity oracle peoplesoft products vulnerability

Published Jan 15, 2014

Updated

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Org and Workforce Dev.

Affected Software

2 affected components

Oracle PeopleSoft Products=9.1

Oracle PeopleSoft Products=9.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Event History

Jan 15, 2014

CVE Published

via MITRE·01:33 AM

Data Sourced

via MITRE·01:33 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5909?

CVE-2013-5909 is categorized with intermediate severity due to its potential impact on confidentiality and integrity.

How do I fix CVE-2013-5909?

To fix CVE-2013-5909, ensure that your instance of Oracle PeopleSoft Products 9.1 or 9.2 is updated to the latest available security patch.

What components are affected by CVE-2013-5909?

CVE-2013-5909 affects the PeopleSoft Enterprise HRMS component of Oracle PeopleSoft Products 9.1 and 9.2.

Who is affected by CVE-2013-5909?

Remote authenticated users of Oracle PeopleSoft Products 9.1 and 9.2 are affected by CVE-2013-5909.

When was CVE-2013-5909 disclosed?

CVE-2013-5909 was disclosed in 2014 as part of Oracle's Critical Patch Update.