Vulnerability CVE-2011-3520

Vulnerability Name:

CVE-2011-3520 (CCN-70796)

Assigned:

2011-10-18

Published:

2011-10-18

Updated:

2017-08-29

Summary:

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect integrity via unknown vectors related to Personalization.

CVSS v3 Severity:

2.0 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): High User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

2.8 Low (CVSS v2 Vector: AV:N/AC:M/Au:M/C:N/I:P/A:N)
2.1 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:M/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): Multiple_Instances
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

2.8 Low (CCN CVSS v2 Vector: AV:N/AC:M/Au:M/C:N/I:P/A:N)
2.1 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:M/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): Multiple_Instances
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None