CVE-2016-5472: High severity oracle peopletools vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity, and availability via vectors related to Install and Packaging.

Affected Software

2 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.54

Oracle PeopleSoft Enterprise PeopleTools=8.55

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5472?

CVE-2016-5472 is classified as a vulnerability that can affect the confidentiality, integrity, and availability of affected systems.

How do I fix CVE-2016-5472?

To fix CVE-2016-5472, users should patch their Oracle PeopleSoft Products installations to the latest recommended version.

What versions of PeopleSoft are affected by CVE-2016-5472?

CVE-2016-5472 affects Oracle PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55.

Can CVE-2016-5472 be exploited locally?

Yes, CVE-2016-5472 can be exploited by local users who have access to the affected systems.

What types of issues can CVE-2016-5472 cause?

CVE-2016-5472 can lead to issues related to data confidentiality, integrity, and overall system availability.