CVE-2018-3016

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2951

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Configuration Manager. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where...

CVE-2018-2985

CVE-2018-2985 concerns Oracle’s PeopleSoft Enterprise PeopleTools, specifically the Workflow subcomponent. Affected versions are 8.55 and 8.56. The vulnerability is described as unauthenticated and exploitable over HTTP, with exploitation requiring user interaction from a non-attacker, and potent...

CVE-2018-2990

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.55 and 8.56. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2919

CVE-2018-2919 is a vulnerability in the Oracle PeopleSoft product stack, specifically the PeopleSoft Enterprise PeopleTools component (subcomponent: Unified Navigation). The affected software versions identified are 8.55 and 8.56. The vulnerability is exploitable via HTTP over the network by an u...

CVE-2018-3016

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2990

CVE-2018-2990 affects Oracle’s PeopleSoft Enterprise PeopleTools (subcomponent: Integration Broker). Connected CNVD entry confirms affected versions are 8.55 and 8.56. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to obtain unauthorized access to, or modify, cr...

Oracle PeopleSoft Enterprise PeopleTools Local Vulnerability

PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools to support the development and operation of PeopleSoft applications. A security vulnerability exists in the implementation of the Oracle PeopleSoft Enterprise PeopleTools component, which could be exploited by an...

CVE-2018-2809

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Homepage & Navigation. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2809

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Homepage & Navigation. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2821

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2793

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: PsAdmin. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft...

CVE-2018-2772

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2772

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2821

The CVE-2018-2821 entry concerns Oracle PeopleSoft, specifically the Rich Text Editor within the PeopleTools component. Affected versions are 8.54, 8.55 and 8.56. The vulnerability is exploitable over HTTP by an unauthenticated, network-connected attacker and requires user interaction. Successful...

CVE-2018-2774

CVE-2018-2774 affects Oracle PeopleSoft Enterprise PT PeopleTools, subcomponent SQR, in versions 8.54, 8.55, and 8.56. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to perform unauthorized update/insert/delete operations and read data, with a partial denial of ...

CVE-2018-2774

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: SQR. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2793

CVE-2018-2793 affects Oracle PeopleSoft Enterprise PeopleTools PsAdmin in PeopleSoft versions 8.54–8.56. An unauthenticated attacker with logon to the infrastructure hosting PeopleTools can gain unauthorized access to data; CVSSv3 base score 6.2 (Confidentiality High). Root cause details are desc...

CVE-2018-2809

CVE-2018-2809 affects Oracle PeopleSoft Enterprise PeopleTools Fluid Homepage & Navigation. Affected versions: 8.54, 8.55, 8.56. An unauthenticated, network-accessible attacker via HTTP can compromise PeopleTools; exploitation requires user interaction. Impact: potential unauthorized updates, ins...

CVE-2018-2788

CVE-2018-2788 affects Oracle PeopleSoft Enterprise PeopleTools (Fluid Core) with vulnerable versions 8.55 and 8.56. It is exploitable over HTTP by an unauthenticated attacker; user interaction is required, and attacks may lead to unauthorized update/insert/delete and read access to PeopleTools da...