CVE-2019-2599: Medium severity oracle peopletools vulnerability
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pagelet Wizard). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2599?
CVE-2019-2599 has been assessed as having a critical severity rating due to its potential for exploitation by low privileged attackers.
How do I fix CVE-2019-2599?
To remediate CVE-2019-2599, it is recommended to apply the latest security patches provided by Oracle for affected PeopleSoft versions.
Which Oracle PeopleSoft versions are affected by CVE-2019-2599?
CVE-2019-2599 affects Oracle PeopleSoft Enterprise PT PeopleTools versions 8.55, 8.56, and 8.57.
Can CVE-2019-2599 be exploited remotely?
Yes, CVE-2019-2599 can be exploited by attackers with network access via HTTP, making it a concerning remote vulnerability.
What is the impact of CVE-2019-2599 if exploited?
Exploitation of CVE-2019-2599 could allow unauthorized access to sensitive functionalities within the affected People's Tools applications.