CVE-2016-0408: Medium severity oracle peopletools vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component.

Affected Software

3 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.53

Oracle PeopleSoft Enterprise PeopleTools=8.54

Oracle PeopleSoft Enterprise PeopleTools=8.55

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0408?

CVE-2016-0408 has been classified as having a medium severity level.

How do I fix CVE-2016-0408?

To fix CVE-2016-0408, apply the latest patches provided by Oracle for the affected PeopleSoft versions.

Who is affected by CVE-2016-0408?

CVE-2016-0408 affects remote authenticated users of Oracle PeopleSoft Enterprise PeopleTools versions 8.53 to 8.55.

What is the impact of CVE-2016-0408?

The impact of CVE-2016-0408 involves potential confidentiality and integrity issues in the application.

Is CVE-2016-0408 part of a larger set of vulnerabilities?

Yes, CVE-2016-0408 is part of a critical patch update that addresses multiple vulnerabilities in Oracle PeopleSoft products.