| Vulnerability Name: | CVE-2012-0564 (CCN-74973) | ||||||||
| Assigned: | 2012-04-17 | ||||||||
| Published: | 2012-04-17 | ||||||||
| Updated: | 2017-12-07 | ||||||||
| Summary: | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50 and 8.51 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Query. | ||||||||
| CVSS v3 Severity: | 5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 6.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P) 4.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)
4.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2012-0564 Source: CCN Type: SA48882 Oracle PeopleSoft Enterprise PeopleTools Multiple Vulnerabilities Source: SECUNIA Type: UNKNOWN 48882 Source: MANDRIVA Type: Broken Link MDVSA-2013:150 Source: CCN Type: Oracle Critical Patch Update Advisory - April 2012 Oracle Critical Patch Update Advisory - April 2012 Source: CONFIRM Type: Patch, Vendor Advisory http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html Source: CCN Type: OSVDB ID: 81387 Oracle PeopleSoft Enterprise PeopleTools Query Component Unspecified Remote Code Execution Source: BID Type: Third Party Advisory, VDB Entry 53051 Source: CCN Type: BID-53051 Oracle PeopleSoft Enterprise PeopleTools CVE-2012-0564 Remote Vulnerability Source: SECTRACK Type: UNKNOWN 1026954 Source: XF Type: UNKNOWN peoplesoftpeopletools-query-cve20120564(74973) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||