Input validation error in PeopleSoft Enterprise PeopleTools - CVE-2013-2406
Published: April 17, 2013 / Updated: August 11, 2020
Vulnerability identifier: #VU42898
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2013-2406
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote #AU# to manipulate data.
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology.
Affected software
PeopleSoft Enterprise PeopleTools
How to mitigate CVE-2013-2406
Install update from vendor's website.