CVE-2017-3547

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: MultiChannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2017-3547

CVE-2017-3547 affects Oracle PeopleSoft Enterprise PeopleTools (MultiChannel Framework) on affected ToolsRelease versions 8.54 and 8.55. The vulnerability enables unauthenticated attackers with network access via HTTP to compromise PeopleSoft PeopleTools, potentially leading to unauthorized creat...

CRLF Injection - PeopleSoft IMServlet

Application: Oracle PeopleSoft Versions Affected: ToolsRelease: 8.55.03; ToolsReleaseDB: 8.55; PeopleSoft HCM 9.2 Vendor: Oracle Bugs: SSRF Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Authors: Dmitry Yudin ERPScan aka...