CVE-2014-6460: Medium severity oracle peoplesoft products vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, and 8.54 allows remote authenticated users to affect confidentiality and integrity via vectors related to QUERY.

Affected Software

3 affected components

Oracle PeopleSoft Products=8.52

Oracle PeopleSoft Products=8.53

Oracle PeopleSoft Products=8.54

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6460?

CVE-2014-6460 is considered to have a medium severity due to its potential impact on confidentiality and integrity.

How do I fix CVE-2014-6460?

To fix CVE-2014-6460, it is recommended to apply the appropriate patch provided by Oracle for PeopleSoft Products versions 8.52, 8.53, and 8.54.

Who is affected by CVE-2014-6460?

CVE-2014-6460 affects remote authenticated users of Oracle PeopleSoft Products versions 8.52, 8.53, and 8.54.

What components of PeopleSoft are impacted by CVE-2014-6460?

The vulnerability in CVE-2014-6460 specifically impacts the PeopleTools component of Oracle PeopleSoft Products.

What vectors are related to CVE-2014-6460?

CVE-2014-6460 relates to vectors that can affect the confidentiality and integrity of the system through QUERY capabilities.