CVE-2018-3257

The CVE-2018-3257 entry concerns Oracle PeopleSoft Products, specifically the PeopleTools PIA Core Technology subcomponent. The CNVD entry identifies the affected versions as 8.55 and 8.56 and describes an unauthenticated vulnerability reachable over HTTP that can allow unauthorized read, update,...

CVE-2018-3154

CVE-2018-3154 affects Oracle PeopleSoft Products, specifically the PeopleTools Portal subcomponent. Affected versions are 8.55 and 8.56. The vulnerability enables an unauthenticated, network-accessible attacker (via HTTP) to compromise PeopleTools, with human interaction required for exploitation...

CVE-2018-3192

CVE-2018-3192 affects Oracle PeopleSoft’s PeopleTools component (Query subcomponent) with affected versions 8.55 and 8.56. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, potentially taking over the affected system....

CVE-2018-3206

CVE-2018-3206 affects Oracle PeopleSoft Products, specifically the Enterprise PeopleTools Portal subcomponent. Affected versions are 8.55 and 8.56. An unauthenticated attacker with network access via HTTP can compromise PeopleSoft PeopleTools, with exploitation requiring user interaction. Consequ...

CVE-2018-3192

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Query. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-3255

The CVE-2018-3255 vulnerability affects Oracle PeopleSoft Products, specifically the Fluid Core subcomponent of PeopleTools in versions 8.55–8.57. An unauthenticated attacker with network access over HTTP can exploit it, with user interaction required, to read, update, insert, or delete data in P...

CVE-2018-3262

CVE-2018-3262 affects Oracle PeopleSoft Enterprise PeopleTools Stylesheet (versions 8.55, 8.56, 8.57). The vulnerability allows unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, with successful attacks requiring user interaction. The impact ca...

CVE-2018-3153

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2018-3262

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Stylesheet. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3207

CVE-2018-3207 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Portal subcomponent, with vulnerable versions 8.55 and 8.56 . The description states an unauthenticated attacker with HTTP network access can compromise PeopleSoft Enterprise PeopleTools, with attacks requiring some ...

CVE-2018-3192

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Query. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-3132

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3153

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2018-3257

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3206

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-3202

The CVE concerns Oracle PeopleSoft Products’ PeopleTools Performance Monitor in versions 8.55 and 8.56. A unauthenticated attacker with network access via HTTP could read a subset of data, per CVSS 3.0 base metrics (C:L, I:N, A:N). Connected sources confirm the affected component and versions; no...

CVE-2018-3194

CVE-2018-3194 affects Oracle PeopleSoft Products, specifically the PeopleTools component’s Activity Guide subcomponent. Affected versions are 8.55 and 8.56. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to exploit a flaw that enables unauthorized update, inse...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2019-28268)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Access Control Error Vulnerability (CNVD-2019-40764)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Access Control Error Vulnerability (CNVD-2019-40765)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...