Main
Vulnerability Database
Exploits
ID:6288 - Exploit for Input validation error in PeopleSoft Enterprise PeopleTools - CVE-2017-10366
ID:6288 - Exploit for Input validation error in PeopleSoft Enterprise PeopleTools - CVE-2017-10366
Published: June 17, 2021
Vulnerability identifier: #VU38040
Vulnerability risk: High
CVE-ID: CVE-2017-10366
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
PeopleSoft Enterprise PeopleTools
PeopleSoft Enterprise PeopleTools
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PT PeopleTools. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Remediation
Install update from vendor's website.