CVE-2016-0462: Medium severity oracle peopletools vulnerability

Published Jan 21, 2016

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via unknown vectors related to Multichannel Framework, a different vulnerability than CVE-2015-2650.

Affected Software

2 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.53

Oracle PeopleSoft Enterprise PeopleTools=8.54

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Event History

Jan 21, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0462?

CVE-2016-0462 has a medium severity level, allowing remote authenticated users to affect confidentiality.

How do I fix CVE-2016-0462?

Fixing CVE-2016-0462 involves upgrading to the latest patches provided by Oracle for PeopleSoft Enterprise PeopleTools 8.53 and 8.54.

Who is affected by CVE-2016-0462?

CVE-2016-0462 affects remote authenticated users of Oracle PeopleSoft Products 8.53 and 8.54.

What components are involved in CVE-2016-0462?

CVE-2016-0462 involves the Multichannel Framework component of the PeopleSoft Enterprise PeopleTools.

Are there any known mitigation strategies for CVE-2016-0462?

There are no specific mitigation strategies for CVE-2016-0462 other than applying the recommended patches from Oracle.