CVE-2014-6486: Medium severity oracle peoplesoft products vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect integrity via unknown vectors related to Talent Acquisition Manager - Security.

Affected Software

1 affected component

Oracle PeopleSoft Products=9.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6486?

CVE-2014-6486 has not been publicly assigned a specific severity rating but it affects the integrity of the PeopleSoft Enterprise HRMS component.

How do I fix CVE-2014-6486?

To fix CVE-2014-6486, users should apply the latest patches and updates provided by Oracle for PeopleSoft Products 9.2.

Who is affected by CVE-2014-6486?

CVE-2014-6486 affects remote authenticated users of Oracle PeopleSoft Products version 9.2.

What component is vulnerable in CVE-2014-6486?

The vulnerability in CVE-2014-6486 specifically affects the Talent Acquisition Manager - Security component of Oracle PeopleSoft.

Can CVE-2014-6486 be exploited remotely?

Yes, CVE-2014-6486 can be exploited by remote authenticated users.