Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

640 matches found

Prion
Prion•added 2017/10/19 5:29 p.m.•18 views

Code injection

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...

4.9CVSS4.3AI score0.01368EPSS
SaveExploits0References3Affected Software1
CVE
CVE•added 2017/10/19 5:00 p.m.•55 views

CVE-2017-10304

The CVE-2017-10304 vulnerability affects Oracle PeopleSoft Enterprise HCM (Security subcomponent) in version 9.2. The issue is exploitable over HTTP with network access, requiring user interaction, and can lead to unauthorized read, update, insert, or delete of PeopleSoft HCM data (confidentialit...

5.4CVSS4.9AI score0.01368EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment•added 2017/10/19 5:00 p.m.•14 views

CVE-2017-10304

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...

5.8AI score0.01368EPSS
SaveExploits0References3
CVE
CVE•added 2017/10/19 5:00 p.m.•60 views

CVE-2017-10306

CVE-2017-10306 affects Oracle PeopleSoft Enterprise HCM (Security subcomponent) in version 9.2. The vulnerability allows a low-privileged, network-accessing attacker (HTTP) to perform unauthorized updates, inserts, deletes, and read access to PeopleSoft HCM data after user interaction. CVSS 3.0 b...

4.9CVSS4AI score0.0134EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2017/10/19 5:00 p.m.•27 views

CVE-2017-10306

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...

3.4AI score0.0134EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2017/10/19 5:00 p.m.•14 views

CVE-2017-10306

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...

5.4AI score0.0134EPSS
SaveExploits0References3
zdt
zdt•added 2017/07/22 12:00 a.m.•81 views

Oracle PeopleSoft ToolsRelease 8.55.03 / ToolsReleaseDB 8.55 / HCM 9.2 XSS Vulnerabilities

PeopleSoft ToolsRelease version 8.55.03, ToolsReleaseDB version 8.55, and HCM version 9.2 suffer from a TestServlet cross site scripting vulnerability. 1. ADVISORY INFORMATION Title: Multiple XSS POST request Vulnerabilities in TestServlet PeopleSoft Advisory ID: ERPSCAN-17-037 Advisory URL:...

5.8CVSS6.7AI score0.02389EPSS
SaveExploits2
zdt
zdt•added 2017/07/22 12:00 a.m.•75 views

Oracle Integration Gateway File Upload Vulnerability

Exploit for windows platform in category web applications 1. ADVISORY INFORMATION Title: File Upload in Integration Gateway PSIGW Advisory ID: ERPSCAN-17-039 Advisory URL: https://erpscan.com/advisories/erpscan-17-039-file-upload-integration-gateway-psigw-peoplesoft/ Risk: High Date published:...

7.5CVSS8.4AI score0.02543EPSS
SaveExploits2
zdt
zdt•added 2017/07/22 12:00 a.m.•67 views

Oracle Integration Gateway Directory Traversal Vulnerability

Oracle Integration Gateway PSIGW suffers from a directory traversal vulnerability. 1. ADVISORY INFORMATION Title: Directory Traversal vulnerability in Integration Gateway PSIGW Advisory ID: ERPSCAN-17-038 Advisory URL:...

7.5CVSS0.3AI score0.02543EPSS
SaveExploits2
zdt
zdt•added 2017/05/20 12:00 a.m.•100 views

Oracle PeopleSoft - Server-Side Request Forgery Vulnerability

Exploit for java platform in category web applications Application: Oracle PeopleSoft Versions Affected: ToolsRelease: 8.55.03; ToolsReleaseDB: 8.55; PeopleSoft HCM 9.2 Vendor URL: http://oracle.com Bugs: SSRF Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017...

6.4CVSS6.8AI score0.13335EPSS
SaveExploits5
exploitpack
exploitpack•added 2017/05/19 12:00 a.m.•100 views

Oracle PeopleSoft - Server-Side Request Forgery

Oracle PeopleSoft - Server-Side Request Forgery Application: Oracle PeopleSoft Versions Affected: ToolsRelease: 8.55.03; ToolsReleaseDB: 8.55; PeopleSoft HCM 9.2 Vendor URL: http://oracle.com Bugs: SSRF Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference...

6.4CVSS0.7AI score0.13335EPSS
SaveExploits5
Exploit DB
Exploit DB•added 2017/04/25 12:00 a.m.•189 views

Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Entity via DOCTYPE

Application: Oracle PeopleSoft Versions Affected: PeopleSoft HCM 9.2 on PeopleTools 8.55 Vendor URL: http://oracle.com Bug: XXE Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Author: Nadya Krivdyuk ERPScan Description 1...

6.5CVSS6.8AI score0.49947EPSS
SaveExploits10
Packet Storm
Packet Storm•added 2017/04/20 12:00 a.m.•386 views

Oracle PeopleSoft HCM 9.2 XXE Injection

Application: Oracle PeopleSoft Versions Affected: PeopleSoft HCM 9.2 on PeopleTools 8.55 Vendor URL: http://oracle.com Bug: XXE Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Author: Nadya Krivdyuk ERPScan Description 1...

6.7AI score0.49947EPSS
SaveExploits10
zdt
zdt•added 2017/04/20 12:00 a.m.•95 views

Oracle PeopleSoft HCM 9.2 XXE Injection Vulnerability

Exploit for windows platform in category remote exploits Application: Oracle PeopleSoft Versions Affected: PeopleSoft HCM 9.2 on PeopleTools 8.55 Vendor URL: http://oracle.com Bug: XXE Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April...

6.4CVSS6.8AI score0.49947EPSS
SaveExploits10
zdt
zdt•added 2017/04/20 12:00 a.m.•86 views

Oracle PeopleSoft ToolsRelease / ToolsReleaseDB / HCM SSRF Vulnerabilities

Oracle PeopleSoft ToolsRelease version 8.55.03, ToolsReleaseDB version 8.55, and HCM version 9.2 suffer from a server-side request forgery vulnerability. Application: Oracle PeopleSoft Versions Affected: ToolsRelease: 8.55.03; ToolsReleaseDB: 8.55; PeopleSoft HCM 9.2 Vendor URL: http://oracle.com...

6.4CVSS6.9AI score0.13335EPSS
SaveExploits5
erpscan
erpscan•added 2017/03/27 12:00 a.m.•547 views

Directory Traversal Vulnerability in Integration Gateway (PSIGW)

Application: Oracle PeopleSoft Versions Affected: PeopleTools 8.54, 8.55 Vendor: Oracle Bugs: Directory Traversal Reported: 27.03.2017 Vendor response: 28.03.2017 Date of Public Advisory: 18.07.2017 Reference: Oracle CPU July 2017 Authors: Roman Shalymov ERPScan VULNERABILITY INFORMATION Class:...

7.5CVSS2.1AI score0.02543EPSS
SaveExploits2
NVD
NVD•added 2017/01/27 10:59 p.m.•23 views

CVE-2017-3315

Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

4.3CVSS3AI score0.01448EPSS
SaveExploits0References3
OSV
OSV•added 2017/01/27 10:59 p.m.•9 views

CVE-2017-3315

Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

4.3CVSS7.3AI score0.01448EPSS
SaveExploits0References3
CVE
CVE•added 2017/01/27 10:01 p.m.•55 views

CVE-2017-3315

CVE-2017-3315 describes a vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products , affected version is 9.2 . The issue is exploitable by a low-privileged attacker with network access via HTTP , leading to unauthorized read access to a subset of data wi...

4.3CVSS3.7AI score0.01448EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment•added 2017/01/27 10:01 p.m.•13 views

CVE-2017-3315

Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

5.1AI score0.01448EPSS
SaveExploits0References3
Rows per page
Query Builder