CVE-2019-2499

CVE-2019-2499 affects Oracle PeopleSoft Enterprise PeopleTools, subcomponent PIA Search Functionality, with affected versions 8.55–8.57. The vulnerability allows an unauthenticated attacker with network access via HTTP to impact data via PeopleTools, with potential unauthorized update/insert/dele...

CVE-2019-2405

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Security. Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2019-2443

CVE-2019-2443 affects Oracle PeopleSoft: PeopleTools (XML Publisher) on versions 8.55, 8.56, 8.57. The vulnerability arises in the XML Publisher subcomponent and can be exploited remotely via HTTP by a highly privileged attacker to take over PeopleSoft Enterprise PeopleTools. CVSS v3.0 base score...

CVE-2019-2490

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Panel Processor. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2439

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-2404

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-2421

CVE-2019-2421 affects Oracle PeopleSoft products, specifically the PeopleSoft Enterprise HCM eProfile Manager Desktop component (Guided Self Service) in version 9.2. The vulnerability is in the eProfile Manager Desktop subcomponent, allowing an unauthenticated attacker with network access via HTT...

CVE-2019-2416

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Application Server. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2019-2499

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search Functionality. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2442

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Core. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2417

Oracle PeopleSoft Enterprise PeopleTools, subcomponent Performance Monitor, versions 8.55–8.57 are affected. An unauthenticated attacker with network access over HTTP can compromise data, enabling unauthorized update/insert/delete and read access. Root cause is in the Performance Monitor componen...

CVE-2019-2433

CVE-2019-2433 affects Oracle PeopleSoft Enterprise PeopleTools, subcomponent XML Publisher, with vulnerable versions 8.55, 8.56, and 8.57. The root cause is described via the CVE entry as an easily exploitable issue that allows a high-privileged attacker with network access over HTTP to compromis...

CVE-2019-2423

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2416

CVE-2019-2416 affects Oracle PeopleSoft Enterprise PeopleTools (Application Server) with affected versions 8.55, 8.56, and 8.57. The vulnerability is described as easily exploitable, allowing a low-privilege attacker who can access the system over HTTP to compromise PeopleSoft Enterprise PeopleTo...

CVE-2019-2408

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Feeds. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-2471

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-2405

CVE-2019-2405 affects Oracle PeopleSoft Enterprise PeopleTools (Security subcomponent) with affected versions 8.55, 8.56, and 8.57. The vulnerability is described as difficult to exploit and can be triggered by a low-privileged attacker who can access the system over HTTP, potentially allowing ta...

CVE-2019-2519

CVE-2019-2519 affects Oracle PeopleSoft 9.2, specifically the Manage Requisition Status subcomponent of PeopleSoft Enterprise SCM eProcurement. The connected sources confirm a vulnerability in that component that could allow an unauthenticated attacker, over HTTP with network access and with user...

CVE-2019-2423

CVE-2019-2423 affects Oracle PeopleSoft Enterprise PeopleTools (PIA Search subcomponent) with affected versions 8.55, 8.56, and 8.57. The vulnerability enables unauthenticated remote access over HTTP to potentially update, insert, delete, or read data in PeopleSoft PeopleTools and is described as...

CVE-2019-2408

CVE-2019-2408 affects the Oracle PeopleSoft Enterprise PeopleTools component, subcomponent Feeds, with affected versions 8.55, 8.56, and 8.57. The vulnerability is exploitable over a network via HTTP and unauthenticated access is possible, but exploitation requires human interaction from a user o...