Input validation error in PeopleSoft Enterprise PeopleTools - CVE-2013-2409
Published: April 17, 2013 / Updated: August 11, 2020
Vulnerability identifier: #VU42899
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2013-2409
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via vectors related to PIA Core Technology.
Affected software
PeopleSoft Enterprise PeopleTools
How to mitigate CVE-2013-2409
Install update from vendor's website.