CVE-2017-10256 is an easily exploitable vulnerability affecting Oracle PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0, specifically within the EPPCM_HIER_TOP subcomponent. An unauthenticated attacker with network access via HTTP can compromise the system, though successful attacks require user interaction. This can lead to unauthorized modification or deletion of some PeopleSoft data, as well as unauthorized read access to a subset of data. The vulnerability has a CVSS 3.0 Base Score of 6.1 (Medium), indicating impacts on confidentiality and integrity. Its attack vector is network-based with low attack complexity, but requires user interaction. While the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. There is no evidence of active exploitation, nor are there known public exploits available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting a low level of public awareness or concern.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
9.1.0CPE matchmatch criteria | cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.