CVE-2020-2947 - Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (comp

CVE-2020-2947

Summary

Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Absence Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Absence Management accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

References

https://www.oracle.com/security-alerts/cpuapr2020.html

Vulnerable Configurations

cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_absence_management:9.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_absence_management:9.2:*:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 16-04-2020 - 19:38)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:S/C:N/I:P/A:N

refmap via4

misc

https://www.oracle.com/security-alerts/cpuapr2020.html

Last major update

16-04-2020 - 19:38

Published

15-04-2020 - 14:15

Last modified

16-04-2020 - 19:38