CVE-2021-2216 | Oracle PeopleSoft Enterprise PeopleTools Multichannel Framework unknown vulnerability

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

1	30
0	22

vulnerability_cvss3_meta_tempscore	2
vulnerability_cvss3_vuldb_tempscore	2
vulnerability_cvss2_vuldb_tempscore	2
vulnerability_cvss2_nvd_basescore	1
source_cve_cna	1

vulnerability_cvss3_meta_tempscore

vulnerability_cvss3_vuldb_tempscore

vulnerability_cvss2_vuldb_tempscore

vulnerability_cvss2_nvd_basescore

source_cve_cna

90%	33
50%	10
70%	9

90%

50%

70%

90%	33
80%	10
70%	9

90%

80%

70%

ID	Commited	User	Field	Change	Remarks	Accepted	Reason	C
11183385	04/26/2021	VulD...	cvss2_nvd_basescore	5.8	nist.gov	04/26/2021	accepted	90
11183384	04/26/2021	VulD...	cve_cna	Oracle	nvd.nist.gov	04/26/2021	accepted	70
11183383	04/26/2021	VulD...	cvss2_nvd_ai	N	nvd.nist.gov	04/26/2021	accepted	70
11183382	04/26/2021	VulD...	cvss2_nvd_ii	P	nvd.nist.gov	04/26/2021	accepted	70
11183381	04/26/2021	VulD...	cvss2_nvd_ci	P	nvd.nist.gov	04/26/2021	accepted	70
11183380	04/26/2021	VulD...	cvss2_nvd_au	N	nvd.nist.gov	04/26/2021	accepted	70
11183379	04/26/2021	VulD...	cvss2_nvd_ac	M	nvd.nist.gov	04/26/2021	accepted	70
11183378	04/26/2021	VulD...	cvss2_nvd_av	N	nvd.nist.gov	04/26/2021	accepted	70
11183377	04/26/2021	VulD...	cvss3_meta_tempscore	5.8	see CVSS documentation	04/26/2021	accepted	90
11183376	04/26/2021	VulD...	cvss3_vuldb_tempscore	5.8	see CVSS documentation	04/26/2021	accepted	90
11183375	04/26/2021	VulD...	cvss2_vuldb_tempscore	5.6	see CVSS documentation	04/26/2021	accepted	90
11183374	04/26/2021	VulD...	cve_nvd_summary	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).	cve.mitre.org	04/26/2021	accepted	70
11183373	04/26/2021	VulD...	cve_assigned	1607468400	cve.mitre.org	04/26/2021	accepted	70
11169242	04/23/2021	VulD...	price_0day	$5k-$25k	see exploit price documentation	04/23/2021	accepted	90
11169241	04/23/2021	VulD...	cvss3_meta_tempscore	6.1	see CVSS documentation	04/23/2021	accepted	90
11169240	04/23/2021	VulD...	cvss3_meta_basescore	6.1	see CVSS documentation	04/23/2021	accepted	90
11169239	04/23/2021	VulD...	cvss3_vuldb_tempscore	6.1	see CVSS documentation	04/23/2021	accepted	90
11169238	04/23/2021	VulD...	cvss3_vuldb_basescore	6.1	see CVSS documentation	04/23/2021	accepted	90
11169237	04/23/2021	VulD...	cvss2_vuldb_tempscore	6.4	see CVSS documentation	04/23/2021	accepted	90
11169236	04/23/2021	VulD...	cvss2_vuldb_basescore	6.4	see CVSS documentation	04/23/2021	accepted	90

Commited

User

Field

Change

Remarks

Accepted

Reason

Oracle PeopleSoft Enterprise PeopleTools 8.56/8.57/8.58 Multichannel Framework unknown vulnerability

🔒 Login Required

Want to stay up to date on a daily basis?