Input validation error in PeopleSoft Enterprise PeopleTools - CVE-2011-2315
Published: October 19, 2011 / Updated: August 11, 2020
Vulnerability identifier: #VU44596
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-2315
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote #AU# to read and manipulate data.
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security.
Affected software
PeopleSoft Enterprise PeopleTools
How to mitigate CVE-2011-2315
Install update from vendor's website.