CVE-2017-3315: Infoleak
Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM ePerformance. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM ePerformance accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3315?
CVE-2017-3315 has a CVSS score that indicates it is easily exploitable with low privileges.
How do I fix CVE-2017-3315?
To fix CVE-2017-3315, you should apply the latest Oracle PeopleSoft security patches relevant to version 9.2.
Who is affected by CVE-2017-3315?
CVE-2017-3315 affects users of Oracle PeopleSoft Enterprise Human Capital Management ePerformance version 9.2.
What type of vulnerability is CVE-2017-3315?
CVE-2017-3315 is categorized as a security vulnerability within the PeopleSoft Enterprise HCM ePerformance component.
Can CVE-2017-3315 be exploited remotely?
Yes, CVE-2017-3315 can be exploited remotely by a low privileged attacker with network access via HTTP.