CVE-2020-14795: Medium severity oracle peopletools vulnerability

Published Oct 21, 2020

Updated

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).

Affected Software

2 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.57

Oracle PeopleSoft Enterprise PeopleTools=8.58

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuoct2020.html

Event History

Oct 21, 2020

CVE Published

via MITRE·02:04 PM

Data Sourced

via MITRE·02:04 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-14795?

CVE-2020-14795 is rated as a high severity vulnerability.

How do I fix CVE-2020-14795?

To address CVE-2020-14795, you should apply the latest security patches provided by Oracle for PeopleSoft Enterprise PeopleTools.

What versions are affected by CVE-2020-14795?

CVE-2020-14795 affects Oracle PeopleSoft Enterprise PeopleTools versions 8.57 and 8.58.

Can CVE-2020-14795 be exploited remotely?

Yes, CVE-2020-14795 can be exploited remotely by an unauthenticated attacker with network access via HTTP.

What type of vulnerability is CVE-2020-14795?

CVE-2020-14795 is an easily exploitable vulnerability in the PIA Core Technology component of PeopleSoft.