CVE-2020-14558

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Query. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Environment Mgmt Console. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2020-14627

CVE-2020-14627 affects Oracle PeopleSoft Enterprise PeopleTools (component: Query) in versions 8.56, 8.57, and 8.58. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft PeopleTools; though the attack requires user interaction, it can lead to ...

CVE-2020-14627

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Query. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2020-14627

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Query. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2020-14600

CVE-2020-14600 affects Oracle PeopleSoft Enterprise PeopleTools (Portal) with affected versions 8.56, 8.57, and 8.58. The issue allows unauthenticated attackers over HTTP to impact data integrity, requiring user interaction, and potentially enabling unauthorized update/insert/delete of PeopleTool...

CVE-2020-14592

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Rich Text Editor. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2020-14592

The CVE-2020-14592 entry concerns Oracle PeopleSoft Enterprise PeopleTools Rich Text Editor. Affected versions are 8.56, 8.57, and 8.58. The vulnerability is exploitable by an unauthenticated attacker over HTTP with network access, and successful exploitation requires user interaction. Impact inc...

CVE-2020-14600

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2020-14558

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2020-14558

CVE-2020-14558 affects Oracle PeopleSoft Enterprise PeopleTools (Portal) with affected versions 8.56, 8.57 and 8.58. The vulnerability allows an unauthenticated attacker over HTTP to read a subset of PeopleTools data. Root cause and exact vulnerable component are described consistently across mul...

CVE-2020-14564

CVE-2020-14564 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools, Environment Mgmt Console. Affected versions are 8.56, 8.57, and 8.58. An attacker with network access over HTTP and high privileges can compromise PeopleSoft PeopleTools, enabling unauthorized update/insert/deletion of c...

CVE-2020-14564

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Environment Mgmt Console. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2020-14558

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using...

The vulnerability of the nVision component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to trigger a service failure.

The vulnerability of the nVision component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the HTTP protocol...

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a hacker to induce a service failure.

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP protocol...

The vulnerability of the Process Scheduler component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Process Scheduler component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...