Vulnerabilities > CVE-2002-1252 - Unspecified vulnerability in Peoplesoft Peopletools

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
peoplesoft
NVD
Published: 2003-02-07
Updated: 2024-11-20

Summary

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the SimpleFileHandler handler.

Vulnerable Configurations

Part Description Count
Application
Peoplesoft
5

References