Unscored severity · published Apr 16, 2014
CVE-2014-2437
Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Integration Broker, a different vulnerability than CVE-2014-2447.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Peoplesoft Products · Oracle
8.52; 8.53 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2437
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2437
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
More from Peoplesoft Products
5.4
CVE-2020-14587
Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses)
–
CVE-2016-0409
Unspecified vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to…
–
CVE-2015-4887
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality, integrity, and…
–
CVE-2015-4876
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect integrity via…
–
CVE-2015-4850
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity…