CVE-2018-3076

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-3076
Vulnerability in the PeopleSoft Enterprise CS Financial Aid component of Oracle PeopleSoft Products (subcomponent: ISIR Processing). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Financial Aid. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise CS Financial Aid accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

2.7 /10

CVSS v3 : LOW

V3 Legend

Vector : AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch Vendor Advisory
http://www.securityfocus.com/bid/104830 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041306 Third Party Advisory VDB Entry
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch Vendor Advisory
http://www.securityfocus.com/bid/104830 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041306 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:oracle:peoplesoft_enterprise_cs_financial_aid:9.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise_cs_financial_aid:9.2:*:*:*:*:*:*:*
History

21 Nov 2024, 04:05

Type Values Removed Values Added
References () http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - Patch, Vendor Advisory () http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/104830 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/104830 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1041306 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1041306 - Third Party Advisory, VDB Entry
Information

Published : 2018-07-18 13:29

Updated : 2024-11-21 04:05

NVD link : CVE-2018-3076

Mitre link : CVE-2018-3076

CVE.ORG link : CVE-2018-3076

JSON object : View

Products Affected

oracle

  • peoplesoft_enterprise_cs_financial_aid
CWE
NVD-CWE-noinfo