CVE-2019-2408: Medium severity oracle peopletools vulnerability
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Feeds). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2408?
CVE-2019-2408 has a high severity rating due to its ability to allow unauthenticated attackers to compromise the system.
How do I fix CVE-2019-2408?
To fix CVE-2019-2408, users should apply the latest patches provided by Oracle for affected PeopleSoft versions.
What versions are affected by CVE-2019-2408?
CVE-2019-2408 affects Oracle PeopleSoft Enterprise PeopleTools versions 8.55, 8.56, and 8.57.
Can CVE-2019-2408 be exploited remotely?
Yes, CVE-2019-2408 can be exploited remotely by unauthenticated attackers with network access via HTTP.
What component of PeopleSoft is affected by CVE-2019-2408?
CVE-2019-2408 affects the Feeds component of the PeopleSoft Enterprise PeopleTools.