CVE-2019-2586
First published: Tue Apr 23 2019(Updated: )
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: RemoteCall). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Credit: secalert_us@oracle.com secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle PeopleSoft Enterprise PT PeopleTools | =8.55 | |
| Oracle PeopleSoft Enterprise PT PeopleTools | =8.56 | |
| Oracle PeopleSoft Enterprise PT PeopleTools | =8.57 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-2586?
CVE-2019-2586 is categorized as a high severity vulnerability that can be easily exploited.
How do I fix CVE-2019-2586?
To mitigate CVE-2019-2586, it is recommended to apply the latest security patches provided by Oracle for affected PeopleSoft versions.
What versions of PeopleSoft are affected by CVE-2019-2586?
CVE-2019-2586 affects Oracle PeopleSoft Enterprise PT PeopleTools versions 8.55, 8.56, and 8.57.
Who can exploit CVE-2019-2586?
CVE-2019-2586 can be exploited by low privileged attackers with network access via HTTP.
What component is vulnerable in CVE-2019-2586?
CVE-2019-2586 involves a vulnerability in the RemoteCall subcomponent of the PeopleSoft Enterprise PT PeopleTools.
- agent/type
- agent/severity
- agent/references
- agent/remedy
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/oracle
- canonical/oracle peoplesoft enterprise peopletools
- version/oracle peoplesoft enterprise peopletools/8.55
- version/oracle peoplesoft enterprise peopletools/8.56
- version/oracle peoplesoft enterprise peopletools/8.57