Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-3023

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Stylesheet. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-3014

CVE-2019-3014 affects Oracle PeopleSoft Enterprise PeopleTools Performance Monitor. Vulnerable: PeopleTools 8.56 and 8.57. Attackable over HTTP with network access; user interaction required. Impacts include unauthorized update/insert/delete and read of PeopleTools data. CVSSv3 base score 6.1 (Co...

CVE-2019-3014

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Performance Monitor. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-3014

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Performance Monitor. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-3015

CVE-2019-3015 affects Oracle PeopleSoft Enterprise PeopleTools (Integration Broker). Affected are PeopleTools versions 8.56 and 8.57. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, enabling unauthorized read access to a subset of PeopleSoft Enterprise ...

CVE-2019-3023

CVE-2019-3023 affects Oracle PeopleSoft Enterprise PeopleTools (Stylesheet) versions 8.56 and 8.57. The vulnerability is exploitable over HTTP by an unauthenticated attacker on the network and requires user interaction from a recipient, with the potential to cause unauthorized updates, inserts or...

CVE-2019-3023

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Stylesheet. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-2985

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Fluid Core. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-2985

The CVE-2019-2985 entry concerns Oracle PeopleSoft PeopleTools Fluid Core with affected versions 8.56 and 8.57. Affects requires network access over HTTP and unauthenticated access, with human interaction required for exploitation. The impact includes unauthorized update/insert/delete and read ac...

CVE-2019-2932

CVE-2019-2932 affects Oracle PeopleSoft: PeopleTools Tree Manager in versions 8.56 and 8.57. According to Red Hat and NVD records, the vulnerability allows a low-privilege, unauthenticated network attacker with HTTP access to compromise PeopleSoft Enterprise PeopleTools, potentially leading to un...

CVE-2019-2932

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Tree Manager. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-2932

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Tree Manager. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-2931

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-2915

CVE-2019-2915 affects Oracle PeopleSoft Enterprise PeopleTools Fluid Core. Affected versions are 8.56 and 8.57. An unauthenticated attacker with network access via HTTP can compromise PeopleSoft PeopleTools, with human interaction required for the attack. Impact includes unauthorized update/inser...

CVE-2019-2915

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Fluid Core. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-2929

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-2929

CVE-2019-2929 affects Oracle PeopleSoft PeopleTools (Portal) with affected versions 8.56 and 8.57. The Red Hat/Oracle/NVD entries describe an easily exploitable vulnerability where an unauthenticated attacker over HTTP can compromise PeopleSoft Enterprise PeopleTools, with attacks requiring user ...

CVE-2019-2931

CVE-2019-2931 affects Oracle PeopleSoft’s PeopleTools Portal. Affected are PeopleSoft 8.56 and 8.57. The vulnerability is exploitable over HTTP by an unauthenticated attacker and requires user interaction to succeed, potentially yielding unauthorized update/insert/delete and read access to People...

CVE-2019-2929

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...