CVE-2005-3463

Technical details for CVE-2005-3463 are not publicly provided in the supplied documents. The records note an unspecified vulnerability with unknown impact/vectors in Oracle PeopleSoft 8.44–8.46.03; monitor for updates.

CVE-2005-3462

Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln PSE02...

CVE-2005-3463

Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identified by Oracle Vuln PSE03...

CVE-2005-3461: Undefined Security Weakness

Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identified by Oracle Vuln PSE01...

CVE-2005-3463: Undefined Security Weakness

Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identified by Oracle Vuln PSE03...

CVE-2005-3464: Undefined Security Weakness

Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46 has unknown impact and attack vectors, as identified by Oracle Vuln PSE04...

CVE-2005-3462: Undefined Security Weakness

Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln PSE02...

CVE-2003-0626

CVE-2003-0626 relates to the PeopleSoft PeopleBooks/PeopleTools CGI component. The issue resides in psdoccgi.exe (used by PeopleBooks Search CGI) where two arguments, headername and footername , can be crafted to read arbitrary files outside the web root due to insufficient input validation. Affe...

CVE-2003-0627

CVE-2003-0627 refers to a DoS issue in PeopleSoft PeopleBooks Search CGI (psdoccgi.exe) affecting PeopleTools versions 8.4–8.43. The vulnerability arises from headername/footername argument handling, which can cause the application to crash when processing crafted input, enabling remote attackers...

CVE-2003-0626: Undefined Security Weakness

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the 1 headername or 2 footername arguments...

CVE-2003-0627: Undefined Security Weakness

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service application crash, possibly via the headername and footername arguments...

CVE-2002-1252

The CVE-2002-1252 entry concerns the Application Messaging Gateway for PeopleTools 8.1x (used in PeopleSoft products). Affected component/attack surface involves XML External Entities (XXE) fields in an HTTP POST processed by the SimpleFileHandler, allowing remote attackers to read arbitrary file...

CVE-2003-0104

Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet...

CVE-2002-1252

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities XXE fields in an HTTP POST request that is processed by the SimpleFileHandler handler...

CVE-2003-0104

CVE-2003-0104 : Affected software are PeopleTools 8.10–8.18, 8.40, and 8.41. The issue is a directory traversal in the SchedulerTransfer servlet that allows remote attackers to overwrite arbitrary files. The connected documents confirm the vulnerable component and the impact, but do not provide e...

CVE-2003-0104: Undefined Security Weakness

Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet...

CVE-2002-1252: Undefined Security Weakness

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities XXE fields in an HTTP POST request that is processed by the SimpleFileHandler handler...

CVE-2003-0627

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service application crash, possibly via the headername and footername arguments...

CVE-2003-0628

PeopleSoft Gateway Administration servlet gateway.administration in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include SSI files via an HTTP request with an invalid value...

CVE-2003-0629

Cross-site scripting XSS vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript...