CVE-2016-3423: Medium severity oracle peopletools vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-0698.

Affected Software

3 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.53

Oracle PeopleSoft Enterprise PeopleTools=8.54

Oracle PeopleSoft Enterprise PeopleTools=8.55

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3423?

CVE-2016-3423 is rated as a high severity vulnerability affecting Oracle PeopleSoft Products.

How do I fix CVE-2016-3423?

To fix CVE-2016-3423, apply the patches provided by Oracle for the affected versions of PeopleSoft Enterprise PeopleTools.

Who is affected by CVE-2016-3423?

Remote authenticated users of Oracle PeopleSoft Products 8.53, 8.54, and 8.55 are affected by CVE-2016-3423.

What components are involved in CVE-2016-3423?

CVE-2016-3423 involves vulnerabilities in the Rich Text Editor component of PeopleSoft Enterprise PeopleTools.

Can CVE-2016-3423 affect data confidentiality?

Yes, CVE-2016-3423 can impact both the confidentiality and integrity of data within the affected Oracle PeopleSoft systems.