CVE-2017-10418

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: PeopleSoft CDA. The supported version that is affected is 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10287

CVE-2017-10287 affects Oracle PeopleSoft Enterprise FSCM, Strategic Sourcing subcomponent, version 9.2. A low-privilege, network-accessible (HTTP) attacker can obtain unauthorized read access to a subset of FSCM data. The description provides no further root-cause details. CVSS 3.0 base score is ...

CVE-2017-10368

CVE-2017-10368 affects Oracle PeopleSoft Enterprise SCM eProcurement (Manage Requisition Status) in versions 9.1.00 and 9.2.00. The vulnerability is exploitable over HTTP by an unauthenticated attacker and requires user interaction; it can lead to unauthorized update/insert/delete and read access...

CVE-2017-10327

CVE-2017-10327 affects Oracle PeopleSoft Products, specifically the PeopleTools component (subcomponent Query) in Versions 8.54–8.56. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise PeopleSoft Enterprise PeopleTools, with human interaction require...

CVE-2017-10426

CVE-2017-10426 affects Oracle PeopleSoft Enterprise FSCM, Staffing Front Office subcomponent, version 9.2. The vulnerability allows a high-privilege attacker with network access via HTTP to read a subset of FSCM data due to an unspecified underlying flaw. Impact is limited to unauthorized read ac...

CVE-2017-10362

CVE-2017-10362 affects Oracle PeopleSoft Products, specifically the Sawbridge subcomponent of PeopleSoft Enterprise PeopleTools. Vulnerable versions are 8.54, 8.55, and 8.56. An unauthenticated, network-accessible attacker can exploit this via HTTP to read a subset of PeopleSoft Enterprise People...

CVE-2017-10368

Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products subcomponent: Manage Requisition Status. Supported versions that are affected are 9.1.00 and 9.2.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10381

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-10364

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Environment Mgmt. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10406

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-10280

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Test Framework. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-10394

Technical details about CVE-2017-10394 (affected exact components, root cause, exploit vectors, or patches) are not provided in the connected documents. Monitor for updates.

CVE-2017-10373

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Health Center. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10304

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...

CVE-2017-10382

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-10422

CVE-2017-10422 affects Oracle’s PeopleSoft products, specifically the PeopleTools component (subcomponent: Updates Change Assistant), version 8.54. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, potentially gainin...

CVE-2017-10287

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2017-10287

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2017-10368

Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products subcomponent: Manage Requisition Status. Supported versions that are affected are 9.1.00 and 9.2.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10394

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Security. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSof...