Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-3302 State: PUBLISHED Published: 2017-02-12T04:43:00 Last Updated: 2024-10-08T20:13:36.675Z Vendors: Oracle Corporation Products: MySQL Server Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. Description: Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3. Additional Analyst
nd MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/96162 - https://access.redhat.com/errata/RHSA-2017:2787 - http://www.securitytracker.com/id/1038287 - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - https://access.redhat.com/errata/RHSA-2018:0574 - https://access.redhat.com/errata/RHSA-2018:0279 - http://www.debian.org/security/2017/dsa-3834 - http://www.debian.org/security/2017/dsa-3809 - http://www.openwall.com/lists/oss-security/2017/02/11/11 - https://access.redhat.com/errata/RHSA-2017
ty/2017/dsa-3809 - http://www.openwall.com/lists/oss-security/2017/02/11/11 - https://access.redhat.com/errata/RHSA-2017:2192
CVE ID: CVE-2017-3303 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:35:17.783Z Vendors: Oracle Products: XML Gateway Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Description: Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite (subcomponent: Oracle Transport Agent). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle XML Gateway
cks require human interaction from a person other than the attacker and while the vulnerability is in Oracle XML Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle XML Gateway accessible data as well as unauthorized update, insert or delete access to some of Oracle XML Gateway accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95602 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/techn
nces: - http://www.securityfocus.com/bid/95602 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3304 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:22:36.029Z Vendors: Oracle Corporation Products: MySQL Cluster Problem Types: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. Description: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported versions that are affected are 7.2.27
he MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported versions that are affected are 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier and 7.5.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L). Additiona
e Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1038287 - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - http://www.securityfocus.com/bid/97815
CVE ID: CVE-2017-3305 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:22:26.025Z Vendors: Oracle Corporation Products: MySQL Server Problem Types: Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privil
ns that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue allows man-in-the-middle attackers to hijack the authentication of users by leveraging incorrect ordering of secu
issue allows man-in-the-middle attackers to hijack the authentication of users by leveraging incorrect ordering of security parameter verification in a client, aka, "The Riddle". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:2787 - http://www.openwall.com/lists/oss-security/2017/03/17/3 - http://www.securitytracker.com/id/1038287 - http://riddle.link/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - http://www.debian.org/security/2017/dsa-3834 - http://www.securityfocus.com/bid/97023
CVE ID: CVE-2017-3306 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:22:19.447Z Vendors: Oracle Corporation Products: MySQL Enterprise Monitor Problem Types: Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Enterprise Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Enterprise Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Enterprise Monitor accessi
esult in unauthorized creation, deletion or modification access to critical data or all MySQL Enterprise Monitor accessible data as well as unauthorized access to critical data or complete access to all MySQL Enterprise Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Enterprise Monitor. Description: Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server). Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to com
er. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Enterprise Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Enterprise Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Enterprise Monitor accessible data as well as unauthorized access to critical data or complete access to all MySQL Enterprise Monitor accessible data and unauthorized ability to cause a partial denial of servi
plete access to all MySQL Enterprise Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Enterprise Monitor. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1038287 - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - http://www.securityfocus.com/bid/97724
CVE ID: CVE-2017-3307 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:22:08.723Z Vendors: Oracle Corporation Products: MySQL Enterprise Monitor Problem Types: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Enterprise Monitor. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Enterprise Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Enterprise Monitor. Description: Vulnerabi
uthorized ability to cause a partial denial of service (partial DOS) of MySQL Enterprise Monitor. Description: Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server). Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Enterprise Monitor. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Enterprise Monit
tacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Enterprise Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Enterprise Monitor. CVSS 3.0 Base Score 3.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/97844 - http://www.securitytracker.com/id/1038287 - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
CVE ID: CVE-2017-3308 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:21:57.126Z Vendors: Oracle Corporation Products: MySQL Server Problem Types: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affec
lnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Additional
CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:2787 - http://www.securitytracker.com/id/1038287 - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - https://access.redhat.com/errata/RHSA-2018:0574 - http://www.debian.org/security/2017/dsa-3944 - https://access.redhat.com/errata/RHSA-2018:0279 - http://www.securityfocus.com/bid/97725 - http://www.debian.org/security/2017/dsa-3834 - https://access.redhat.com/errata/RHSA-2017:2886 - https://access.redhat.com/errata/RHSA-2017:
g/security/2017/dsa-3834 - https://access.redhat.com/errata/RHSA-2017:2886 - https://access.redhat.com/errata/RHSA-2017:2192
CVE ID: CVE-2017-3309 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:21:43.974Z Vendors: Oracle Corporation Products: MySQL Server Problem Types: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are
lnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Addi
erver. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:2787 - http://www.securitytracker.com/id/1038287 - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - https://access.redhat.com/errata/RHSA-2018:0574 - http://www.debian.org/security/2017/dsa-3944 - http://www.securityfocus.com/bid/97742 - https://access.redhat.com/errata/RHSA-2018:0279 - http://www.debian.org/security/2017/dsa-3834 - https://access.redhat.com/errata/RHSA-2017:2886 - https://access.redhat.com/errata/RHSA
ian.org/security/2017/dsa-3834 - https://access.redhat.com/errata/RHSA-2017:2886 - https://access.redhat.com/errata/RHSA-2017:2192
CVE ID: CVE-2017-3310 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:35:09.991Z Vendors: Oracle Products: Oracle Database Problem Types: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H Description: Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise OJVM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in OJVM, attacks may significantly impact additional produ
person other than the attacker and while the vulnerability is in OJVM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of OJVM. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95481 - http://www.securitytracker.com/id/1037630 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3311 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:35:03.119Z Vendors: Oracle Products: Application Testing Suite Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Description: Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control (subcomponent: Test Manager for Web Apps). Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Appl
ite. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Application Testing Suite accessible data. CVSS v3.0 Base Score 5.3 (Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95584 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - http://www.securitytracker.com/id/1037633
CVE ID: CVE-2017-3312 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:34:53.133Z Vendors: Oracle Products: MySQL Server Problem Types: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability
ssful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:2787 - https://security.gentoo.org/glsa/201702-17 - http://www.securityfocus.com/bid/95491 - https://access.redhat.com/errata/RHSA-2018:0574 - https://security.gentoo.org/glsa/201702-18 - http://www.securitytracker.com/id/1037640 - https://access.redhat.com/errata/RHSA-2018:0279 - http://www.debian.org/security/2017/dsa-3767
tracker.com/id/1037640 - https://access.redhat.com/errata/RHSA-2018:0279 - http://www.debian.org/security/2017/dsa-3767 - https://access.redhat.com/errata/RHSA-2017:2886 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - http://www.debian.org/security/2017/dsa-3770 - https://access.redhat.com/errata/RHSA-2017:2192
CVE ID: CVE-2017-3313 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:34:44.994Z Vendors: Oracle Products: MySQL Server Problem Types: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Serv
ul attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:2787 - http://www.securityfocus.com/bid/95527 - https://security.gentoo.org/glsa/201702-17 - https://access.redhat.com/errata/RHSA-2018:0574 - http://www.securitytracker.com/id/1037640 - https://access.redhat.com/errata/RHSA-2018:0279 - http://www.debian.org/security/2017/dsa-3767 - https://access.redhat.com/errata/RHSA-2017:2886 - http://www.debian.org/security/2017/dsa-3
org/security/2017/dsa-3767 - https://access.redhat.com/errata/RHSA-2017:2886 - http://www.debian.org/security/2017/dsa-3809 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - https://access.redhat.com/errata/RHSA-2017:2192
CVE ID: CVE-2017-3314 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:34:37.409Z Vendors: Oracle Products: FLEXCUBE Universal Banking Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Description: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle F
ssful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95549 - http://www.securitytracker.com/id/10376
- CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95549 - http://www.securitytracker.com/id/1037636 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3315 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:34:31.237Z Vendors: n/a Products: PeopleSoft Enterprise HCM ePerformance 9.2 Problem Types: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description: Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM ePerformance. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM ePerformanc