CVE-2019-2599
First published: Tue Jul 23 2019(Updated: )
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pagelet Wizard). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle PeopleSoft Enterprise PT PeopleTools | =8.55 | |
| Oracle PeopleSoft Enterprise PT PeopleTools | =8.56 | |
| Oracle PeopleSoft Enterprise PT PeopleTools | =8.57 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-2599?
CVE-2019-2599 has been assessed as having a critical severity rating due to its potential for exploitation by low privileged attackers.
How do I fix CVE-2019-2599?
To remediate CVE-2019-2599, it is recommended to apply the latest security patches provided by Oracle for affected PeopleSoft versions.
Which Oracle PeopleSoft versions are affected by CVE-2019-2599?
CVE-2019-2599 affects Oracle PeopleSoft Enterprise PT PeopleTools versions 8.55, 8.56, and 8.57.
Can CVE-2019-2599 be exploited remotely?
Yes, CVE-2019-2599 can be exploited by attackers with network access via HTTP, making it a concerning remote vulnerability.
What is the impact of CVE-2019-2599 if exploited?
Exploitation of CVE-2019-2599 could allow unauthorized access to sensitive functionalities within the affected People's Tools applications.
- agent/type
- agent/severity
- agent/references
- agent/remedy
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle peoplesoft enterprise peopletools
- version/oracle peoplesoft enterprise peopletools/8.55
- version/oracle peoplesoft enterprise peopletools/8.56
- version/oracle peoplesoft enterprise peopletools/8.57