Oracle PeopleSoft Enterprise PeopleTools Multiple Remote Security Vulnerabilities

Bugtraq ID:	105609
Class:	Unknown
CVE:	CVE-2018-3255 CVE-2018-3153 CVE-2018-3205 CVE-2018-3261 CVE-2018-3198 CVE-2018-3262 CVE-2018-3129
Remote:	Yes
Local:	No
Published:	Oct 16 2018 12:00AM
Updated:	Oct 29 2018 12:00PM
Credit:	Oracle
Vulnerable:	Oracle PeopleSoft Enterprise PeopleTools 8.57 Oracle PeopleSoft Enterprise PeopleTools 8.56 Oracle PeopleSoft Enterprise PeopleTools 8.55 Oracle Linux 7 Oracle Linux 6.0
Not Vulnerable:

Oracle PeopleSoft Enterprise PeopleTools Multiple Remote Security Vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools is prone to multiple remote security vulnerabilities.

These vulnerabilities can be exploited over the 'HTTP' protocol.

These vulnerabilities affect the following supported versions:
8.55, 8.56, 8.57

Oracle PeopleSoft Enterprise PeopleTools Multiple Remote Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle PeopleSoft Enterprise PeopleTools Multiple Remote Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle PeopleSoft Enterprise PeopleTools Multiple Remote Security Vulnerabilities

References:

• Oracle Homepage (Oracle)
  
• Oracle Critical Patch Update Advisory - October 2018 (Oracle)
  
• Oracle Linux Bulletin - October 2018 (Oracle)