4940 matches found
Code injection
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Stylesheet. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2018-2774
CVE-2018-2774 affects Oracle PeopleSoft Enterprise PT PeopleTools, subcomponent SQR, in versions 8.54, 8.55, and 8.56. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to perform unauthorized update/insert/delete operations and read data, with a partial denial of ...
CVE-2018-2821
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2018-2772
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2018-2793
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: PsAdmin. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft...
CVE-2018-2809
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Homepage & Navigation. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2018-2838
The set of connected documents confirms a concrete vulnerability in Oracle PeopleSoft Enterprise PRTL Interaction Hub (EPPCM_HIER_TOP) for v9.1. CNVD-2018-09218 specifies a remote vulnerability in PeopleSoft PRTL Interaction Hub where an attacker could remotely read, update, insert or delete data...
CVE-2018-2820
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Core. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2018-2772
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2018-2821
The CVE-2018-2821 entry concerns Oracle PeopleSoft, specifically the Rich Text Editor within the PeopleTools component. Affected versions are 8.54, 8.55 and 8.56. The vulnerability is exploitable over HTTP by an unauthenticated, network-connected attacker and requires user interaction. Successful...
CVE-2018-2821
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2018-2774
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: SQR. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2018-2785
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Stylesheet. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2018-2820
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Core. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2018-2793
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: PsAdmin. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft...
CVE-2018-2838
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2018-2820
CVE-2018-2820 affects Oracle PeopleSoft Enterprise PeopleTools Fluid Core (versions 8.54–8.56). A low-privilege, network-accessible vulnerability allows unauthorized read access to a subset of PeopleSoft data via HTTP. The CVSS 3.0 base score is 4.3 (Confidentiality impact). Exploitation details ...
CVE-2018-2772
CVE-2018-2772 affects Oracle PeopleSoft Enterprise PeopleTools Rich Text Editor in versions 8.54–8.56. The vulnerability permits a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools and can lead to a full takeover. CVSS v3.0 base score is 8.8 (Hig...
CVE-2018-2752
Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...
CVE-2018-2785
CVE-2018-2785 affects Oracle PeopleSoft Enterprise PeopleTools, subcomponent Stylesheet. Affects supported versions 8.54, 8.55, and 8.56. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Exploitation requires human ...