CVE-2018-2838

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2878

Vulnerability in the PeopleSoft Enterprise HCM Shared Components component of Oracle PeopleSoft Products subcomponent: Notepad. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2878

CVE-2018-2878 affects Oracle PeopleSoft Enterprise HCM Shared Components, Notepad subcomponent, in PeopleSoft 9.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the HCM Shared Components, with successful attacks enabling unauthorized update/insert...

CVE-2018-2752

CVE-2018-2752 affects the Oracle PeopleSoft Enterprise HCM component (subcomponent: Security) in PeopleSoft Products, with version 9.2 reported as affected. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to access HCM data, with attacks requiring user interaction. Im...

CVE-2018-2788

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Core. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2878

Vulnerability in the PeopleSoft Enterprise HCM Shared Components component of Oracle PeopleSoft Products subcomponent: Notepad. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2793

CVE-2018-2793 affects Oracle PeopleSoft Enterprise PeopleTools PsAdmin in PeopleSoft versions 8.54–8.56. An unauthenticated attacker with logon to the infrastructure hosting PeopleTools can gain unauthorized access to data; CVSSv3 base score 6.2 (Confidentiality High). Root cause details are desc...

CVE-2018-2774

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: SQR. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2788

CVE-2018-2788 affects Oracle PeopleSoft Enterprise PeopleTools (Fluid Core) with vulnerable versions 8.55 and 8.56. It is exploitable over HTTP by an unauthenticated attacker; user interaction is required, and attacks may lead to unauthorized update/insert/delete and read access to PeopleTools da...

CVE-2018-2809

CVE-2018-2809 affects Oracle PeopleSoft Enterprise PeopleTools Fluid Homepage & Navigation. Affected versions: 8.54, 8.55, 8.56. An unauthenticated, network-accessible attacker via HTTP can compromise PeopleTools; exploitation requires user interaction. Impact: potential unauthorized updates, ins...

CVE-2018-2788

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Core. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2809

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Homepage & Navigation. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2752

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...

CVE-2018-2785

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Stylesheet. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2018-08457)

PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. An unspecified vulnerability exists in the Fluid Homepage & Navigation component in Oracle PeopleSoft Enterprise PeopleTools. An attacker could...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2018-08456)

PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. An unspecified vulnerability exists in the Fluid Core component in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2018-08454)

PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. An unspecified vulnerability exists in the Rich Text Editor component in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2018-08455)

PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. An unspecified vulnerability exists in the Stylesheet component in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit this...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2018-08452)

PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. An unspecified vulnerability exists in the Rich Text Editor component in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2018-08453)

PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. An unspecified vulnerability exists in the Fluid Core component in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the...