CVE-2017-10146

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10146

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10106

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10061

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10019

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10021

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2017-10015

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Application Designer. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Application Designer. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Test Framework. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

CVE-2017-10017

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Workcenter. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10021

CVE-2017-10021 describes a vulnerability in the PeopleSoft Enterprise PeopleTools component, specifically the PIA Search subcomponent, affecting PeopleSoft 8.54 and 8.55 . The issue allows an unauthenticated attacker, with network access via HTTP , to compromise PeopleTools. Attacks require human...

CVE-2017-10106

CVE-2017-10106 affects Oracle PeopleSoft Enterprise PeopleTools Portal (ToolsRelease 8.54 and 8.55). The vulnerability is a cross-site scripting (XSS) issue in TestServlet/Portal components that allows an unauthenticated, network-accessing attacker to execute scripts via HTTP requests, potentiall...

CVE-2017-10015

CVE-2017-10015 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools, subcomponent Application Designer , with impacted versions 8.54 and 8.55 . The vulnerability enables a low-privilege attacker with logon to the execution infrastructure to compromise PeopleSoft Enterprise PeopleTools, po...

CVE-2017-10020

CVE-2017-10020 affects Oracle PeopleSoft Enterprise PeopleTools (subcomponent Updates Change Assistant). Affected versions are 8.54 and 8.55. The vulnerability is exploitable by a low-privileged user with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes, potentially le...

CVE-2017-10249

CVE-2017-10249 affects Oracle’s PeopleSoft Enterprise PeopleTools subcomponent Integration Broker , with affected versions 8.54 and 8.55 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Exploitation requires human...

CVE-2017-10253

CVE-2017-10253 affects Oracle’s PeopleSoft Enterprise PeopleTools Pivot Grid in versions 8.54 and 8.55. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise PeopleTools, with successful attacks potentially enabling unauthorized update, insert, or delet...

CVE-2017-10146

CVE-2017-10146 affects Oracle PeopleSoft Enterprise PeopleTools Portal (subcomponent: Portal) in PeopleTools 8.54 and 8.55. The vulnerability is a directory traversal/related issue that enables a remote attacker with network access over HTTP to read, and potentially update/insert/delete data, wit...