CVE-2019-2405 in PeopleSoft Enterprise PeopleTools信息

摘要

由 VulDB • 2026-06-22

Oracle PeopleSoft Products（子组件：Security）中的PeopleSoft Enterprise PeopleTools组件存在漏洞。受影响的受支持版本包括8.55、8.56和8.57。该漏洞难以利用，允许具有网络访问权限的低特权攻击者通过HTTP协议破坏PeopleSoft Enterprise PeopleTools。成功利用此漏洞可导致攻击者接管PeopleSoft Enterprise PeopleTools。CVSS 3.0基础评分为7.5（对机密性、完整性和可用性造成影响）。CVSS向量：(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)。

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2018-12-14

披露

2019-01-16

管理

已接受

条目

VDB-129653

CPE

准备好

CWE

CWE-284 (已确认)

CVSS

7.5 (NVD)

EPSS

0.01467

KEV

否

活动

非常低

部门

Telecommunication, Chemical, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2019-2405
NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-2405
CVE Details	https://www.cvedetails.com/cve/CVE-2019-2405/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!