CVE-2016-8291: High severity oracle peopletools vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.

Affected Software

2 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.54

Oracle PeopleSoft Enterprise PeopleTools=8.55

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-8291?

CVE-2016-8291 is classified as a vulnerability that affects the confidentiality and integrity of the system.

How do I fix CVE-2016-8291?

To remediate CVE-2016-8291, users should apply the latest security patches provided by Oracle for PeopleSoft Enterprise PeopleTools 8.54 and 8.55.

Who is affected by CVE-2016-8291?

CVE-2016-8291 affects users of Oracle PeopleSoft Products specifically versions 8.54 and 8.55.

What types of attacks does CVE-2016-8291 allow?

CVE-2016-8291 allows remote attackers to potentially compromise the confidentiality and integrity of the affected systems.

Is CVE-2016-8291 still a threat?

The threat level of CVE-2016-8291 depends on whether the vulnerable versions of PeopleSoft Enterprise PeopleTools are still in use without the appropriate patch.