CVE-2017-3527: Infoleak
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3527?
CVE-2017-3527 is considered an easily exploitable vulnerability that can result in compromising PeopleSoft applications.
How do I fix CVE-2017-3527?
To mitigate CVE-2017-3527, it's recommended to update your PeopleSoft Enterprise PeopleTools to the latest patched version.
What versions are affected by CVE-2017-3527?
CVE-2017-3527 affects Oracle PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55.
Who can exploit CVE-2017-3527?
CVE-2017-3527 can be exploited by an unauthenticated attacker with network access via HTTP.
What component of Oracle products does CVE-2017-3527 affect?
CVE-2017-3527 affects the Fluid Core component of the PeopleSoft Enterprise PeopleTools.