CVE-2013-5909

MediumCVSS 4.9/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Org and Workforce Dev.

Metrics

CVSS 2.0 4.9/10AV:N/AC:M/Au:S/C:P/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/102035
http://secunia.com/advisories/56477
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/64758Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/64855Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029623Third Party Advisory, VDB Entry
http://osvdb.org/102035
http://secunia.com/advisories/56477
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/64758Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/64855Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029623Third Party Advisory, VDB Entry

Timeline

Published: Jan 15, 2014
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-59105.0Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity CVE-2013-59114.3Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrar CVE-2013-591210.0VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via CVE-2013-59134.3Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Comm CVE-2013-59146.8Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to e CVE-2013-59154.3The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers CVE-2013-59164.3Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin,CVE-2013-59177.5SQL injection vulnerability in wp-comments-post.php in the NOSpam PTI plugin 2.1 for WordPress allows remote attackers to execute arbitrary CVE-2013-59184.3Cross-site scripting (XSS) vulnerability in platinum_seo_pack.php in the Platinum SEO plugin before 1.3.8 for WordPress allows remote attack CVE-2013-59195.0Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.CVE-2013-59304.3Cross-site scripting (XSS) vulnerability in search_residential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web CVE-2013-59317.5SQL injection vulnerability in property_listings_detail.php in Real Estate PHP Script allows remote attackers to execute arbitrary SQL comma