CVE-2014-2437: Medium severity Oracle PeopleSoft Products vulnerability

Published Apr 16, 2014

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Integration Broker, a different vulnerability than CVE-2014-2447.

Affected Software

2 affected components

Oracle PeopleSoft Products=8.52

Oracle PeopleSoft Products=8.53

Event History

Apr 16, 2014

CVE Published

via MITRE·02:05 AM

Data Sourced

via MITRE·02:05 AM

Description

Data Sourced

via NVD·02:55 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-2437?

The severity of CVE-2014-2437 is assessed by Oracle but specific details are not provided publicly.

How do I fix CVE-2014-2437?

To fix CVE-2014-2437, it is recommended to apply the latest patches provided by Oracle for PeopleSoft Products versions 8.52 and 8.53.

What components are affected by CVE-2014-2437?

CVE-2014-2437 affects the PT PeopleTools component in Oracle PeopleSoft Products, specifically versions 8.52 and 8.53.

Is remote exploitation possible with CVE-2014-2437?

Yes, CVE-2014-2437 allows remote attackers to potentially affect confidentiality through unspecified vectors.

When was CVE-2014-2437 disclosed?

CVE-2014-2437 was disclosed as part of Oracle's Critical Patch Update in April 2014.