CVE-2010-3527
CVE-2010-3527 is a medium-severity vulnerability in Oracle Peoplesoft And Jdedwards Product Suite with a CVSS 2.0 base score of 5.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.5)
- EPSS exploit prediction: 1% (59th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Oracle Peoplesoft And Jdedwards Product Suite
- Published:
- Last modified:
Description
Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect integrity and availability via unknown vectors.
Frequently asked questions
- What is CVE-2010-3527?
- Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect integrity and availability via unknown vectors.
- How severe is CVE-2010-3527?
- CVE-2010-3527 has a CVSS 2.0 base score of 5.5, rated medium severity.
- Is CVE-2010-3527 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (59th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2010-3527?
- CVE-2010-3527 primarily affects Oracle Peoplesoft And Jdedwards Product Suite. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2010-3527?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2010-3527 published?
- CVE-2010-3527 was published on 2010-10-14 and last updated on 2026-06-16.
References
- http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
- http://www.us-cert.gov/cas/techalerts/TA10-287A.html
Affected products (3)
- cpe:2.3:a:oracle:peoplesoft_and_jdedwards_product_suite:8.9:bundle38:*:*:*:*:*:*
- cpe:2.3:a:oracle:peoplesoft_and_jdedwards_product_suite:9.0:bundle31:*:*:*:*:*:*
- cpe:2.3:a:oracle:peoplesoft_and_jdedwards_product_suite:9.1:bundle6:*:*:*:*:*:*
More vulnerabilities in Oracle Peoplesoft And Jdedwards Product Suite
- CVE-2010-4418 — High (CVSS 7.5): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite…
- CVE-2011-0825 — Medium (CVSS 6.8): Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through…
- CVE-2011-0824 — Medium (CVSS 6.4): Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through…
- CVE-2011-0803 — Medium (CVSS 5.8): Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.9 GA through…
- CVE-2010-4461 — Medium (CVSS 5.5): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 8.9…
- CVE-2010-4441 — Medium (CVSS 5.5): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.1…
All CVEs affecting Oracle Peoplesoft And Jdedwards Product Suite →