CVE-2016-8296: High severity oracle peopletools vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to LDAP.

Affected Software

2 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.54

Oracle PeopleSoft Enterprise PeopleTools=8.55

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-8296?

CVE-2016-8296 is classified as a medium severity vulnerability that impacts confidentiality and integrity.

How do I fix CVE-2016-8296?

To fix CVE-2016-8296, ensure that you apply the latest patches provided by Oracle for PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55.

Who is affected by CVE-2016-8296?

CVE-2016-8296 affects remote authenticated users of Oracle PeopleSoft Products versions 8.54 and 8.55.

What types of vulnerabilities does CVE-2016-8296 relate to?

CVE-2016-8296 relates to vulnerabilities in LDAP that can compromise the confidentiality and integrity of the affected systems.

Is CVE-2016-8296 a remote exploit?

Yes, CVE-2016-8296 is a remote exploit vulnerability that requires authentication to be exploited.