漏洞标题
N/A
漏洞描述信息
Oracle PeopleSoft产品的人民Soft企业 CC 共同应用对象组件(子组件：表单和审批 builder)中的漏洞。受影响的支持版本是9.2。易被利用的漏洞允许使用HTTP通过远程代码执行的低特权攻击者访问人民Soft企业 CC 共同应用对象。成功的攻击需要攻击者之外的人进行手动交互，尽管漏洞在人民Soft企业 CC 共同应用对象中，但攻击可能会对其他产品产生重大影响。此漏洞的成功攻击可能导致未经授权的访问人民Soft企业 CC 共同应用对象可访问数据的部分，以及未经授权的读取人民Soft企业 CC 共同应用对象可访问数据的子集。注意：此企业共同组件是所有人民Soft应用程序产品都使用的。请参阅<a target="_blank" href="https://support.oracle.com/rs?type=doc&id=2487756.1">MOS Note Doc ID 2493366.1</a>以获取补丁信息。CVSS 3.0基础得分5.4(保密性和完整性影响。CVSS向量：(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N))。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects component of Oracle PeopleSoft Products (subcomponent: Form and Approval Builder). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise CC Common Application Objects, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise CC Common Application Objects accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CC Common Application Objects accessible data. Note: This Enterprise Common Component is used by all PeopleSoft Application products. Please refer to the <a target="_blank" href="https://support.oracle.com/rs?type=doc&id=2487756.1">MOS Note Doc ID 2493366.1 for patch information. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Oracle PeopleSoft Enterprise CC Common Application Objects 访问控制错误漏洞
漏洞描述信息
Oracle PeopleSoft Products是美国甲骨文（Oracle）公司的一套企业人力资本管理解决方案，它提供了人力资本管理、财务管理、供应商关系管理等功能。PeopleSoft Enterprise CC Common Application Objects是其中的一个通用应用程序对象组件。 Oracle PeopleSoft Products中的PeopleSoft Enterprise CC Common Application Objects组件9.2版本的Form and Appro
CVSS信息
N/A
漏洞类别
授权问题