CVE-2016-5470: High severity oracle peopletools vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality via vectors related to Application Designer.

Affected Software

2 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.54

Oracle PeopleSoft Enterprise PeopleTools=8.55

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5470?

CVE-2016-5470 is considered to be a moderate severity vulnerability due to its potential impact on confidentiality.

How do I fix CVE-2016-5470?

To remediate CVE-2016-5470, it is recommended to apply the latest security patches provided by Oracle for PeopleSoft Enterprise PeopleTools 8.54 and 8.55.

What systems are affected by CVE-2016-5470?

CVE-2016-5470 affects Oracle PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55.

What type of attacks can exploit CVE-2016-5470?

CVE-2016-5470 can be exploited by remote attackers to affect the confidentiality of data within affected PeopleSoft applications.

Is there a workaround for CVE-2016-5470?

There are currently no publicized workarounds for CVE-2016-5470; applying the available patches is the best course of action.