CVE-2017-3520

CVE-2017-3520 : Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Fluid Core). Affected are v8.54 and v8.55. An unauthenticated attacker with network access over HTTP can compromise PeopleSoft Enterprise PeopleTools; attacks require user interaction and can lead to unauthorized create/de...

CVE-2017-3519

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Security. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3548

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-3547

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: MultiChannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2017-3536

CVE-2017-3536 affects Oracle PeopleSoft Enterprise PeopleTools (Security subcomponent) in versions 8.54 and 8.55. The connected records describe a network-accessible vulnerability that can be exploited by a low-privilege attacker over HTTP and requires user interaction. Successful attacks could l...

CVE-2017-3519

CVE-2017-3519 affects Oracle PeopleSoft Enterprise PeopleTools (Security subcomponent) in versions 8.54 and 8.55. The described vulnerability is exploitable by an unauthenticated attacker over HTTP, potentially leading to unauthorized access to critical data and other PeopleSoft data. The NVD ent...

CVE-2017-3536

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Security. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3520

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Core. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3546

CVE-2017-3546 affects Oracle PeopleSoft Tools (MultiChannel Framework), specifically SSRF in IMServlet for ToolsRelease 8.55.x (ToolsReleaseDB 8.55; HCM 9.2). Connected docs show SSRF allows remote attacker over network to cause cross-site requests, enabling potentially unauthorized access or por...

Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component Remote Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Oracle PeopleSoft Enterprise PeopleTools Remote Vulnerability (CNVD-2017-06139)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle.PeopleSoftEnterprisePeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. Platform components. A securi...

Oracle PeopleSoft Enterprise PeopleTools Remote Vulnerability (CNVD-2017-05843)

Oracle PeopleSoft Enterprise integrates several business functions, including personnel, customer relationship, supply and demand, and financial management. A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools, which can be exploited by remote attackers to compromise...

CVE-2017-3299

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search Functionality. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2017-3298

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2016-8329

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Mobile Application Platform. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2016-8329

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Mobile Application Platform. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Mobile Application Platform. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2016-8329

CVE-2016-8329 affects Oracle PeopleSoft Enterprise PeopleTools (Mobile Application Platform) with affected versions 8.54 and 8.55. The vulnerability is reachable over HTTP with network access, is unauthenticated, and requires user interaction to exploit, potentially enabling unauthorized update/r...

CVE-2017-3298

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...