CVE-2014-2446: Medium severity Oracle PeopleSoft Products vulnerability

Published Apr 16, 2014

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality via vectors related to QAS.

Affected Software

2 affected components

Oracle PeopleSoft Products=8.52

Oracle PeopleSoft Products=8.53

Event History

Apr 16, 2014

CVE Published

via MITRE·02:05 AM

Data Sourced

via MITRE·02:05 AM

Description

Data Sourced

via NVD·02:55 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-2446?

CVE-2014-2446 is classified as a high-severity vulnerability due to its potential impact on confidentiality.

How do I fix CVE-2014-2446?

To fix CVE-2014-2446, update your Oracle PeopleSoft Products to the latest patched version.

Who is affected by CVE-2014-2446?

CVE-2014-2446 affects remote authenticated users of Oracle PeopleSoft Products versions 8.52 and 8.53.

What impact does CVE-2014-2446 have on systems?

CVE-2014-2446 can allow unauthorized access to sensitive information, affecting the confidentiality of data.

Is CVE-2014-2446 being actively exploited?

While there have been no specific reports of active exploitation of CVE-2014-2446, it is recommended to apply the fix to mitigate potential risks.