CVE-2014-0396: Medium severity Oracle PeopleSoft Products vulnerability

Published Jan 15, 2014

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal - Web Services.

Affected Software

2 affected components

Oracle PeopleSoft Products=8.52

Oracle PeopleSoft Products=8.53

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Event History

Jan 15, 2014

CVE Published

via MITRE·01:33 AM

Data Sourced

via MITRE·01:33 AM

Description

Data Sourced

via NVD·04:08 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0396?

CVE-2014-0396 has been rated as a moderate severity vulnerability.

How do I fix CVE-2014-0396?

To remediate CVE-2014-0396, upgrade your Oracle PeopleSoft Products to versions 8.52 or 8.53 to ensure you are using the latest security patches.

What components are affected by CVE-2014-0396?

CVE-2014-0396 affects the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products versions 8.52 and 8.53.

Can CVE-2014-0396 be exploited remotely?

Yes, CVE-2014-0396 allows remote attackers to affect the confidentiality of the affected systems.

What vectors are involved in CVE-2014-0396?

The specific vectors related to CVE-2014-0396 are unspecified but involve the Portal - Web Services of the system.