Unscored severity · published Oct 18, 2011
CVE-2011-3520
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect…
–
CVSS
1%
EPSS
No
On KEV
Description
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect integrity via unknown vectors related to Personalization.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PE
Peoplesoft Enterprise Peopletools · Oracle
8.49; 8.50; 8.51 · source: NVD
PP
Peoplesoft Products · Oracle
8.49; 8.50; 8.51 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3520
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3520
osvdb.org
http://osvdb.org/76522
secunia.com
http://secunia.com/advisories/46515
Patch
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
www.securityfocus.com
http://www.securityfocus.com/bid/50247
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/70796
More from Peoplesoft Enterprise Peopletools
9.8
CVE-2026-35273
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
9.8
CVE-2019-2725
Oracle WebLogic Server, Injection
9.9
CVE-2021-21345
XStream is vulnerable to a Remote Command Execution attack
9.8
CVE-2026-60821
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink)
9.8
CVE-2022-21543
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt)