CVE-2018-2651

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: XML Publisher. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2731

CVE-2018-2731 affects Oracle PeopleSoft Enterprise SCM eProcurement (Manage Requisition Status) in versions 9.1 and 9.2. The issue enables a low-privilege, network-accessing attacker over HTTP to perform unauthorized read, update, insert, or delete actions on data within that subcomponent, per CV...

CVE-2017-10301

CVE-2017-10301 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub (Enterprise Portal subcomponent) with the 9.1.00 release. The vulnerability allows a low-privilege, unauthenticated or network-accessible attacker to exploit over HTTP and potentially cause unauthorized creation, deletion, o...

CVE-2018-2702

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2018-2653

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Connected Query. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2695

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Query. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2605

CVE-2018-2605 affects Oracle PeopleSoft Enterprise PeopleTools (Integration Broker). Affected versions: PeopleTools 8.54–8.56. The flaw allows a low-privilege, network-adjacent attacker to exploit over HTTP to gain unauthorized access to sensitive data within PeopleSoft Enterprise PeopleTools; im...

CVE-2018-2671

The CVE-2018-2671 entry concerns Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise SCM Purchasing component (Supplier Registration subcomponent). Affected is version 9.2. The vulnerability is exploitable by a low-privileged attacker over a network via HTTP, potentially leading to...

CVE-2018-2654

The CVE-2018-2654 entry describes a vulnerability in Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise HCM Human Resources component, subcomponent Company Dir / Org Chart Viewer (version 9.2 affected). An unauthenticated attacker who can reach the system over HTTP can compromise ...

CVE-2018-2605

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2651

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: XML Publisher. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2695

CVE-2018-2695 affects Oracle PeopleSoft Enterprise PeopleTools, subcomponent Query, with affected versions 8.54, 8.55, and 8.56. The vulnerability is exploitable by a low-privilege attacker over HTTP from the network, potentially leading to unauthorized access to confidential data or to data acce...

CVE-2017-10301

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Enterprise Portal. The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2702

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2018-2702

CVE-2018-2702 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise FSCM component (subcomponent: Strategic Sourcing), version 9.2. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to access confidential data or data the attacker can access within ...

CVE-2018-2731

Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products subcomponent: Manage Requisition Status. Supported versions that are affected are 9.1 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2652

The CVE-2018-2652 entry concerns Oracle’s PeopleSoft Enterprise PeopleTools (subcomponent Integration Broker ). Affected versions are 8.54, 8.55, and 8.56 . The vulnerability is described as allowing an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise Peop...

CVE-2018-2671

Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products subcomponent: Supplier Registration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSo...

CVE-2018-2652

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2018-2652

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...