CVE-2016-3421: High severity oracle peopletools vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Activity Guide.

Affected Software

3 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.53

Oracle PeopleSoft Enterprise PeopleTools=8.54

Oracle PeopleSoft Enterprise PeopleTools=8.55

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3421?

CVE-2016-3421 is classified as a medium severity vulnerability affecting confidentiality, integrity, and availability.

Who is affected by CVE-2016-3421?

CVE-2016-3421 affects remote authenticated users of Oracle PeopleSoft Enterprise PeopleTools versions 8.53, 8.54, and 8.55.

How do I fix CVE-2016-3421?

To fix CVE-2016-3421, apply the latest patches provided by Oracle for affected versions of PeopleSoft Enterprise PeopleTools.

What type of vulnerability is CVE-2016-3421?

CVE-2016-3421 is an unspecified vulnerability in the Activity Guide component of Oracle PeopleSoft.

Can CVE-2016-3421 lead to data loss?

Yes, CVE-2016-3421 can potentially affect the integrity and confidentiality of data due to its nature.