Oracle PeopleSoft ToolsRelease 8.55.03 / ToolsReleaseDB 8.55 / HCM 9.2 XSS Vulnerabilities

PeopleSoft ToolsRelease version 8.55.03, ToolsReleaseDB version 8.55, and HCM version 9.2 suffer from a TestServlet cross site scripting vulnerability. 1. ADVISORY INFORMATION Title: Multiple XSS POST request Vulnerabilities in TestServlet PeopleSoft Advisory ID: ERPSCAN-17-037 Advisory URL:...

Oracle Web Center 11.1.1.9.0 / 12.2.1.1.0 / 12.2.1.2.0 XSS

Oracle Web Center XSS Details ======================================================================================== Product: Oracle Web Center Versions 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 Security-Risk: High Remote-Exploit: yes Vendor-URL: https://www.oracle.com/ CVE-ID: CVE-2017-10075 CVSS: 8....

Oracle Integration Gateway Directory Traversal Vulnerability

Oracle Integration Gateway PSIGW suffers from a directory traversal vulnerability. 1. ADVISORY INFORMATION Title: Directory Traversal vulnerability in Integration Gateway PSIGW Advisory ID: ERPSCAN-17-038 Advisory URL:...

Directory Traversal Vulnerability in Integration Gateway (PSIGW)

Application: Oracle PeopleSoft Versions Affected: PeopleTools 8.54, 8.55 Vendor: Oracle Bugs: Directory Traversal Reported: 27.03.2017 Vendor response: 28.03.2017 Date of Public Advisory: 18.07.2017 Reference: Oracle CPU July 2017 Authors: Roman Shalymov ERPScan VULNERABILITY INFORMATION Class:...

Multiple XSS Vulnerabilities in TestServlet (PeopleSoft)

Application: Oracle PeopleSoft Versions Affected: PeopleTools 8.54, 8.55 Vendor: Oracle Bugs: XSS Reported: 26.01.2017 Vendor response: 27.01.2017 Date of Public Advisory: 18.07.2017 Reference: Oracle CPU July 2017 Authors: Dmitri Iudin aka @ret5et ERPScan VULNERABILITY INFORMATION Class: XSS...