CVE-2016-3483: High severity oracle peopletools vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and availability via vectors related to File Processing.

Affected Software

3 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.53

Oracle PeopleSoft Enterprise PeopleTools=8.54

Oracle PeopleSoft Enterprise PeopleTools=8.55

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3483?

CVE-2016-3483 is considered to have a moderate severity impacting confidentiality and availability.

How do I fix CVE-2016-3483?

To fix CVE-2016-3483, upgrade Oracle PeopleSoft Enterprise PeopleTools to a patched version provided by Oracle.

What versions of Oracle PeopleSoft are affected by CVE-2016-3483?

CVE-2016-3483 affects Oracle PeopleSoft Enterprise PeopleTools versions 8.53, 8.54, and 8.55.

Can CVE-2016-3483 be exploited remotely?

Yes, CVE-2016-3483 can be exploited remotely by attackers through specific file processing vectors.

What impact does CVE-2016-3483 have on systems?

CVE-2016-3483 can affect the confidentiality and availability of systems running the vulnerable versions of PeopleSoft.