Medium severity5.3NVD Advisory· Published Jul 18, 2018· Updated Jun 17, 2026

CVE-2018-3072

Description

Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft HRMS. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft HRMS accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected products

Oracle Corporation/Peoplesoft Enterprise Hrmsllm-fuzzy
Range: = 9.2
Oracle Corporation/Peoplesoft Enterprise Human Capital Management Candidate Gatewaycpe-rescue
Range: 9.2

Patches

Vulnerability mechanics

References

www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlnvdPatchVendor Advisory
www.securityfocus.com/bid/104839nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041306nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000