| Reporter | Title | Published | Views | Family All 24 |
|---|---|---|---|---|
 | Oracle PeopleSoft HCM 9.2 XXE Injection Vulnerability | 20 Apr 201700:00 | – | zdt |
| Oracle PeopleSoft - PeopleSoftServiceListeningConnector XML External Entity via DOCTYPE | 25 Apr 201700:00 | – | zdt |
| Oracle PeopleSoft Enterprise PeopleTools < 8.55 - Remote Code Execution Via Blind XML External En | 4 Nov 201700:00 | – | zdt |
 | Oracle PeopleSoft Enterprise PeopleTools Denial of Service Vulnerability | 27 Apr 201700:00 | – | cnvd |
 | CVE-2017-3548 | 24 Apr 201719:00 | – | cvelist |
 | Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Entity via DOCTYPE | 25 Apr 201700:00 | – | exploitdb |
| Oracle PeopleSoft Enterprise PeopleTools < 8.55 - Remote Code Execution Via Blind XML External Entity | 17 May 201700:00 | – | exploitdb |
 | XXE VIA DOCTYPE in PeopleSoft | 23 Dec 201600:00 | – | erpscan |
 | EUVD-2017-12668 | 24 Apr 201719:00 | – | euvd |
 | Oracle PeopleSoft - PeopleSoftServiceListeningConnector XML External Entity via DOCTYPE | 25 Apr 201700:00 | – | exploitpack |
10
Node
OR
[
{
"product": "PeopleSoft Enterprise PT PeopleTools",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "8.54"
},
{
"status": "affected",
"version": "8.55"
}
]
}
]| Source | Link |
|---|---|
| securitytracker | www.securitytracker.com/id/1038301 |
| erpscan | www.erpscan.io/advisories/erpscan-17-020-xxe-via-doctype-peoplesoft/ |
| exploit-db | www.exploit-db.com/exploits/41925/ |
| securityfocus | www.securityfocus.com/bid/97880 |
| oracle | www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| DOCTYPE a PUBLIC "-//B/A/EN" "C:\windows" | request body | /PSIGW/PeopleSoftServiceListeningConnector | XXE via DOCTYPE in PeopleSoft | CWE-611 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:18Current
5.4Medium risk
Vulners AI Score5.4
CVSS 26.4
CVSS 36.5
EPSS0.50837
SSVC