CVE-2024-21097

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Security. Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2024-21097

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Security. Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2024-21065

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Workflow. Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2024-21065

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Workflow. Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2024-21097

CVE-2024-21097 pertains to Oracle’s PeopleSoft Enterprise PeopleTools. Affected are versions 8.59–8.61. The issue arises from insufficient input validation in the Security component, enabling a remote attacker with network access (via HTTP) to potentially access or disclose data. The CVSS 3.1 bas...

CVE-2024-21070

CVE-2024-21070 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Search Framework in PeopleTools versions 8.59–8.61. The issue arises from insufficient input validation in the Search Framework, enabling an unauthenticated attacker with network access via HTTP to cause unauthorize...

CVE-2024-21065

Oracle PeopleSoft CVE-2024-21065 affects PeopleTools Workflow in versions 8.59–8.61. Root cause: insufficient input validation in the Workflow component allows an unauthenticated, HTTP-accessible attacker to read, modify, add or delete data, with human interaction required. Impact aligns to unaut...

Oracle PeopleSoft Enterprise PeopleTools 安全漏洞

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for providing PeopleSoft applications with the ability to stay in sync with users' needs and expectations. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft Enterprise PeopleTools. An attacker could exploit the...

Oracle PeopleSoft Enterprise PeopleTools 安全漏洞

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for providing PeopleSoft applications with the ability to stay in sync with users' needs and expectations. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft Enterprise PeopleTools. An attacker could exploit the...

PT-2024-4903 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.61 Description: The issue exists due to insufficient input validation in the Security component of Oracle PeopleSoft Enterprise PeopleTools. Exploitation of this issue may allow a remo...

PT-2024-3436 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.61 Description: The vulnerability exists in the Search Framework component of PeopleSoft Enterprise PeopleTools due to insufficient input validation. It allows a remote attacker to gai...

PT-2024-3435 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.61 Description: The issue exists due to insufficient input validation in the Workflow component of Oracle PeopleSoft Enterprise PeopleTools. This allows a remote attacker to gain read,...

Vulnerabilities fixed in Oracle PeopleSoft

Oracle has fixed vulnerabilities in PeopleSoft Enterprise PeopleTools. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or to gain access to sensitive data. Causing a Denial-of-Service does not require prior authentication is required. Successful access to sensiti...

PT-2023-9840 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.61 Description: The issue is related to the Portal component of Oracle PeopleSoft Enterprise PeopleTools, where the structure of web pages is not properly protected. This can be...

PT-2023-9582 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.61 Description: The issue is related to insufficient input validation in the XMLPublisher component, allowing a low-privileged attacker with network access via HTTP to compromise...

PT-2023-9312 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.61 Description: The issue exists due to insufficient input validation in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. This allows a remote attacker to gain...

PT-2023-9839 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.61 Description: The issue exists due to insufficient input validation in the OpenSearch Dashboards component. It allows a remote attacker to gain unauthorized access to protected...

The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain read, modify, add, or delete access to data.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker operating remotely to gain read, modify, add, or delete access...

Vulnerabilities fixed in Oracle PeopleSoft

Vulnerabilities have been fixed in Oracle PeopleSoft. The vulnerabilities allow a malicious party to carry out attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Access to sensitive data Oracle has fixed the vulnerabilities in the following...

CVE-2023-22080

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...