Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products (subcomponent: Security). The…

Description

Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM ePerformance. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM ePerformance accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).

Scores

EPSS (exploitation in 30 days)

1.3% · top 30% of all CVEs (3 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

• CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
• CWE-200 (opens in a new tab)Other CVEs with CWE-200

Affected products

• PeopleSoft Enterprise HCM ePerformance 9.2

  • affected PeopleSoft Enterprise HCM ePerformance 9.2

References (3)

• 1037634 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• 95510 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2017-3315](https://trackcve.app/badge/CVE-2017-3315.svg)](https://trackcve.app/cve/CVE-2017-3315)

Record last updated 8 Oct 2024, 20:34 UTC.