Lucene search

OracleCVE-2021-35601

HistoryOct 20, 2021 - 11:17 a.m.

CVE-2021-35601

2021-10-2011:17:04

oracle

web.nvd.nist.gov

cve-2021-35601

peoplesoft

oracle

vulnerability

exploitable

low privileged

critical data

access

nvd

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

Percentile

15.8%

JSON

Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Students Administration). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the PeopleSoft Enterprise CS SA Integration Pack executes to compromise PeopleSoft Enterprise CS SA Integration Pack. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS SA Integration Pack accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Affected configurations

Nvd

Vulners

Node

oraclepeoplesoft_enterprise_cs_sa_integration_packMatch9.0

oraclepeoplesoft_enterprise_cs_sa_integration_packMatch9.2

VendorProductVersionCPE
oraclepeoplesoft_enterprise_cs_sa_integration_pack9.0cpe:2.3:a:oracle:peoplesoft_enterprise_cs_sa_integration_pack:9.0:*:*:*:*:*:*:*
oraclepeoplesoft_enterprise_cs_sa_integration_pack9.2cpe:2.3:a:oracle:peoplesoft_enterprise_cs_sa_integration_pack:9.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	peoplesoft_enterprise_cs_sa_integration_pack	9.0	cpe:2.3:a:oracle:peoplesoft_enterprise_cs_sa_integration_pack:9.0:::::::*
oracle	peoplesoft_enterprise_cs_sa_integration_pack	9.2	cpe:2.3:a:oracle:peoplesoft_enterprise_cs_sa_integration_pack:9.2:::::::*

CNA Affected

[
  {
    "product": "PeopleSoft Enterprise CS SA Integration Pack",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "9.0"
      },
      {
        "status": "affected",
        "version": "9.2"
      }
    ]
  }
]

References

www.oracle.com/security-alerts/cpuoct2021.html

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

Percentile

15.8%

JSON

Related for CVE-2021-35601