CVE-2017-10280

CVE-2017-10280 affects Oracle PeopleSoft Enterprise PeopleTools, subcomponent Test Framework, in versions 8.54, 8.55 and 8.56. The vulnerability is described as easily exploitable with network access over HTTP by a low-privilege attacker, potentially leading to unauthorized access to data across ...

CVE-2017-10280

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Test Framework. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-10306

CVE-2017-10306 affects Oracle PeopleSoft Enterprise HCM (Security subcomponent) in version 9.2. The vulnerability allows a low-privileged, network-accessing attacker (HTTP) to perform unauthorized updates, inserts, deletes, and read access to PeopleSoft HCM data after user interaction. CVSS 3.0 b...

CVE-2017-10306

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...

CVE-2017-10335

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Elastic Search. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10422

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. The supported version that is affected is 8.54. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10164

The CVE concerns Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise FSCM component (subcomponent: Staffing Front Office), affected in version 9.2 . The vulnerability is described as allowing a low-privileged attacker with network access via HTTP to obtain unauthorized read access ...

CVE-2017-10327

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Query. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10304

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...

CVE-2017-10366

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Performance Monitor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10158

CVE-2017-10158 affects Oracle PeopleSoft Products, specifically the PeopleTools Core subcomponent. Affected versions are 8.54, 8.55, and 8.56. The vulnerability is exploitable by an unauthenticated attacker who can access the system over HTTP. Attacks require human interaction from a person other...

CVE-2017-10364

Technical details about CVE-2017-10364 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2017-10158

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Core. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10382

CVE-2017-10382 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise PeopleTools component (subcomponent PIA Core Technology ). Affected versions listed: 8.54, 8.55, 8.56 . The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP ; exploita...

CVE-2017-10373

CVE-2017-10373 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise PT PeopleTools Health Center subcomponent, with affected versions 8.55 and 8.56. The connected data confirms an unauthenticated, network-accessible vulnerability exploitable via HTTP that can lead to unautho...

CVE-2017-10338

Vulnerability CVE-2017-10338 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub (Enterprise Portal subcomponent), specifically version 9.1.00. The issue allows unauthenticated network access via HTTP to compromise the Interaction Hub, with human interaction required for exploitation and po...

CVE-2017-10306

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...

CVE-2017-10426

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10335

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Elastic Search. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10354

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Enterprise Portal. The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...