CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

55 matches found

CVE•added 2017/04/24 7:00 p.m.•108 views

CVE-2017-3546

CVE-2017-3546 affects Oracle PeopleSoft Tools (MultiChannel Framework), specifically SSRF in IMServlet for ToolsRelease 8.55.x (ToolsReleaseDB 8.55; HCM 9.2). Connected docs show SSRF allows remote attacker over network to cause cross-site requests, enabling potentially unauthorized access or por...

6.5CVSS5.3AI score0.09636EPSS

SaveExploits5References5Affected Software1

Cvelist•added 2017/04/24 7:00 p.m.•48 views

CVE-2017-3547

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: MultiChannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

6.4AI score0.02153EPSS

SaveExploits0References4

Cvelist•added 2017/04/24 7:00 p.m.•56 views

CVE-2017-3546

5.4AI score0.09636EPSS

SaveExploits5References5

Positive Technologies•added 2017/04/24 12:00 a.m.•12 views

PT-2017-15981

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.54 Oracle PeopleSoft Products version 8.55 Description The issue affects the PeopleSoft Enterprise PeopleTools component, specifically the MultiChannel Framework subcomponent. It allows an unauthenticated...

7.4CVSS0.02153EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2017/04/24 12:00 a.m.•10 views

CVE-2017-3546: Server-Side Request Forgery (SSRF)

6.5CVSS5.8AI score0.09636EPSS

SaveExploits5References2

Rapid7 Vulnerability Database (full)•added 2017/04/24 12:00 a.m.•13 views

CVE-2017-3547: Improper Neutralization of Special Elements in Output Used by a Downstream Component

7.4CVSS5.8AI score0.02153EPSS

SaveExploits0References2

CNVD•added 2017/04/21 12:00 a.m.•21 views

Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component Remote Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

7.4CVSS6.6AI score0.02153EPSS

SaveExploits0References1

osv_cve•added 2017/01/27 10:59 p.m.•22 views

CVE-2017-3300

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Multichannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS7.3AI score0.016EPSS

SaveExploits2References4

Vulnrichment•added 2017/01/27 10:01 p.m.•38 views

CVE-2017-3300

6AI score0.016EPSS

SaveExploits2References4

Rapid7 Vulnerability Database (full)•added 2017/01/27 12:00 a.m.•6 views

CVE-2017-3300: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.8AI score0.016EPSS

SaveExploits2References2

Positive Technologies•added 2017/01/27 12:00 a.m.•6 views

PT-2017-15763

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue affects the Multichannel Framework subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with network access via HTTP to compromis...

6.1CVSS0.016EPSS

SaveExploits2References6

CNVD•added 2016/01/23 12:00 a.m.•20 views

Unspecified Vulnerability in Oracle PeopleSoft PeopleTools Multichannel Framework Component (CNVD-2016-00495)

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability exists in the Oracle PeopleSoft PeopleTools Multichannel Framework component, which allows remote attackers to exploit the vulnerability to gain unauthorized access to data, resulting in th...

4CVSS6.8AI score0.01546EPSS

SaveExploits0References1

NVD•added 2016/01/21 3:00 a.m.•36 views

CVE-2016-0471

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote attackers to affect confidentiality via unknown vectors related to Multichannel Framework...

4.3CVSS5.7AI score0.01665EPSS

SaveExploits0References2

osv_cve•added 2016/01/21 3:00 a.m.•17 views

CVE-2016-0471

5.8AI score0.01665EPSS

SaveExploits0References2

osv_cve•added 2016/01/21 3:00 a.m.•15 views

CVE-2016-0462

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via unknown vectors related to Multichannel Framework, a different vulnerability than CVE-2015-2650...

6.6AI score0.01546EPSS

SaveExploits0References2

Prion•added 2016/01/21 3:00 a.m.•32 views

Code injection

4.3CVSS6.1AI score0.01665EPSS

SaveExploits0References2Affected Software1

Prion•added 2016/01/21 3:00 a.m.•31 views

Design/Logic Flaw

4CVSS5.6AI score0.01546EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2016/01/21 2:00 a.m.•45 views

CVE-2016-0471

5.7AI score0.01665EPSS

SaveExploits0References2

Cvelist•added 2016/01/21 2:00 a.m.•50 views

CVE-2016-0462

5.2AI score0.01546EPSS

SaveExploits0References2

CVE•added 2016/01/21 2:00 a.m.•77 views

CVE-2016-0471

Technical details about CVE-2016-0471 are not publicly provided in the connected documents; no specifics on impacted product versions, attack vectors, or fixes are included. Monitor for updates.

4.3CVSS6.4AI score0.01665EPSS

SaveExploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by