CVE-2018-3076

Vulnerability in the PeopleSoft Enterprise CS Financial Aid component of Oracle PeopleSoft Products subcomponent: ISIR Processing. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2018-2986

CVE-2018-2986 affects Oracle PeopleSoft Enterprise PeopleTools (subcomponent: Workflow). The vulnerability targets supported versions 8.55 and 8.56 and is exploitable by an unauthenticated attacker over HTTP. Successful exploitation requires human interaction from a person other than the attacker...

CVE-2018-2951

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Configuration Manager. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where...

CVE-2018-2929

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3068

Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products subcomponent: Compensation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-3072

Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products subcomponent: Candidate Gateway. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft HRMS. Successful...

CVE-2018-2929

CVE-2018-2929 affects Oracle PeopleSoft Enterprise PeopleTools, subcomponent PIA Core Technology. Affected versions are 8.55 and 8.56. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools; attacks require human interact...

CVE-2018-2970

CVE-2018-2970 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools, subcomponent PIA Search Functionality, with affected versions 8.55 and 8.56. Connected CNVD-2019-28268 documents a vulnerability in this subcomponent that could let an attacker gain unauthorized access to data, aligning w...

CVE-2018-3068

CVE-2018-3068 affects Oracle PeopleSoft Enterprise HCM Human Resources (subcomponent: Compensation), specifically the 9.2 line. The vulnerability allows unauthenticated, network-accessing users to interact via HTTP and exploit underlying flaws to perform unauthorized updates, inserts, deletes, an...

CVE-2018-3072

Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products subcomponent: Candidate Gateway. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft HRMS. Successful...

CVE-2018-3016

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2990

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.55 and 8.56. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2951

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Configuration Manager. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where...

CVE-2018-3072

CVE-2018-3072 affects Oracle PeopleSoft Products, specifically the PeopleSoft HRMS component (subcomponent Candidate Gateway) with affected version 9.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to read data from PeopleSoft HRMS, as described in multiple so...

CVE-2018-2985

CVE-2018-2985 concerns Oracle’s PeopleSoft Enterprise PeopleTools, specifically the Workflow subcomponent. Affected versions are 8.55 and 8.56. The vulnerability is described as unauthenticated and exploitable over HTTP, with exploitation requiring user interaction from a non-attacker, and potent...

CVE-2018-2990

CVE-2018-2990 affects Oracle’s PeopleSoft Enterprise PeopleTools (subcomponent: Integration Broker). Connected CNVD entry confirms affected versions are 8.55 and 8.56. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to obtain unauthorized access to, or modify, cr...

CVE-2018-3016

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2990

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.55 and 8.56. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3068

Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products subcomponent: Compensation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2919

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Unified Navigation. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...