CVE-2016-8293: High severity oracle peopletools vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and CVE-2016-5530.

Affected Software

2 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.54

Oracle PeopleSoft Enterprise PeopleTools=8.55

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-8293?

CVE-2016-8293 has been classified with a severity level that allows remote attackers to affect the confidentiality and integrity of the affected systems.

What versions of Oracle PeopleSoft Products are affected by CVE-2016-8293?

CVE-2016-8293 affects Oracle PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55.

How do I fix CVE-2016-8293?

To fix CVE-2016-8293, users should apply the necessary security patches provided by Oracle for affected versions.

What components are impacted by CVE-2016-8293?

CVE-2016-8293 impacts the Integration Broker component of the PeopleSoft Enterprise PeopleTools.

Can CVE-2016-8293 be exploited remotely?

Yes, CVE-2016-8293 allows remote attackers to exploit the vulnerability.