CVE-2017-3548

MEDIUM

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).

CVSS v3.1 Score

6.5
MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW
Published: 4/24/2017Modified: 5/13/2026

Related Intelligence (1)

CRITICALZero Day

Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)

Overview On June 10, 2026, Oracle published a security alert for CVE-2026-35273 , a critical vulnerability in the Updates Environment Management component of PeopleSoft Enterprise PeopleTools. Oracle released an out-of-band patch the same day as the advisory, underscoring the urgency of remediation. The vulnerability has a CVSSv3.1 score of 9.8 and is remotely exploitable without authentication. P

CVE-2026-35273CVE-2013-3821
Rapid7

References (10)

http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.htmlPatchVendor Advisoryhttp://www.securityfocus.com/bid/97880Third Party AdvisoryVDB Entryhttp://www.securitytracker.com/id/1038301Third Party AdvisoryVDB Entryhttps://erpscan.io/advisories/erpscan-17-020-xxe-via-doctype-peoplesoft/Third Party Advisoryhttps://www.exploit-db.com/exploits/41925/Third Party AdvisoryVDB Entryhttp://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.htmlPatchVendor Advisoryhttp://www.securityfocus.com/bid/97880Third Party AdvisoryVDB Entryhttp://www.securitytracker.com/id/1038301Third Party AdvisoryVDB Entryhttps://erpscan.io/advisories/erpscan-17-020-xxe-via-doctype-peoplesoft/Third Party Advisoryhttps://www.exploit-db.com/exploits/41925/Third Party AdvisoryVDB Entry