CVE-2018-3198

The CVE refers to Oracle PeopleSoft Enterprise PeopleTools Portal vulnerability (CVE-2018-3198) affecting PeopleSoft PeopleTools 8.55, 8.56, and 8.57. The issue allows an unauthenticated, network-accessible attacker over HTTP to read a subset of PeopleSoft Enterprise PeopleTools data. The CVSSv3 ...

CVE-2018-3165

CVE-2018-3165 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise PeopleTools component (subcomponent: SQR). Affected versions are 8.55 and 8.56. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP and can lead to takeover of PeopleSof...

CVE-2018-3261

CVE-2018-3261 affects Oracle PeopleSoft: PeopleTools Integration Broker in versions 8.55–8.57 allows unauthenticated network access via HTTP, leading to unauthorized read access to a subset of data. The vulnerability is confirmed in multiple sources referencing the same subcomponent and affected ...

CVE-2018-3164

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Elastic Search. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2018-3164

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Elastic Search. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2018-3205

CVE-2018-3205 affects Oracle PeopleSoft Enterprise PeopleTools (Workflow subcomponent). Affected versions are 8.55, 8.56 and 8.57. The vulnerability is easily exploitable over HTTP with network access and unauthenticated, though some exploitation requires user interaction. Successful attacks can ...

CVE-2018-3262

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Stylesheet. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3164

CVE-2018-3164 affects Oracle PeopleSoft PeopleTools Elastic Search subcomponent in PeopleSoft Enterprise PeopleTools (versions 8.55 and 8.56). An unauthenticated attacker with network access via HTTP can compromise data; attacks reportedly require user interaction, and may lead to unauthorized re...

CVE-2018-3239

CVE-2018-3239 affects Oracle PeopleSoft Products, specifically the PeopleTools component (subcomponent Integration Broker). Affected versions are PeopleSoft 8.55 and 8.56. The vulnerability allows an unauthenticated attacker with network access via HTTP to read data from the PeopleSoft Enterprise...

CVE-2018-3206

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-3205

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Workflow. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2018-3257

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3135

CVE-2018-3135 affects Oracle PeopleSoft Products: PeopleSoft Enterprise PeopleTools, Portal subcomponent, versions 8.55 and 8.56. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleTools, with attacks requiring human interaction. Impact can inclu...

CVE-2018-3207

CVE-2018-3207 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Portal subcomponent, with vulnerable versions 8.55 and 8.56 . The description states an unauthenticated attacker with HTTP network access can compromise PeopleSoft Enterprise PeopleTools, with attacks requiring some ...

CVE-2018-3198

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-3130

Vulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft Products subcomponent: Application Portal. The supported version that is affected is 9.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-3207

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-3239

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3193

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Activity Guide. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2018-3193

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Activity Guide. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...