CVE-2017-10256

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-10249

CVE-2017-10249 affects Oracle’s PeopleSoft Enterprise PeopleTools subcomponent Integration Broker , with affected versions 8.54 and 8.55 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Exploitation requires human...

CVE-2017-10106

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10254

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10106

CVE-2017-10106 affects Oracle PeopleSoft Enterprise PeopleTools Portal (ToolsRelease 8.54 and 8.55). The vulnerability is a cross-site scripting (XSS) issue in TestServlet/Portal components that allows an unauthenticated, network-accessing attacker to execute scripts via HTTP requests, potentiall...

CVE-2017-10146

CVE-2017-10146 affects Oracle PeopleSoft Enterprise PeopleTools Portal (subcomponent: Portal) in PeopleTools 8.54 and 8.55. The vulnerability is a directory traversal/related issue that enables a remote attacker with network access over HTTP to read, and potentially update/insert/delete data, wit...

CVE-2017-10126

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: HTML Area. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10045

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10249

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10061

CVE-2017-10061 affects Oracle PeopleSoft Enterprise PeopleTools Integration Broker (PSIGW) in PeopleTools 8.54 and 8.55. The vulnerability allows an unauthenticated, network-based attacker accessible via HTTP to trigger a directory traversal in the Integration Gateway, enabling remote command exe...

CVE-2017-10258

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Add New Image. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10146

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10070

CVE-2017-10070 affects Oracle PeopleSoft Products, specifically the PRTL Interaction Hub component (Maintenance Folders) and version 9.1.0. A remote attacker can exploit this over HTTP to read, update, insert, or delete data in the PRTL Interaction Hub, compromising confidentiality and integrity....

CVE-2017-10018

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2017-10126

CVE-2017-10126 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub, HTML Area subcomponent, in version 9.1.0. The vulnerability is exploitable over HTTP with network access and does not require attacker authentication, but it requires user interaction (UI:R). The issue can lead to unauthori...

CVE-2017-10057

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Discussion Forum. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-10045

The CVE-2017-10045 vulnerability affects Oracle PeopleSoft Enterprise PeopleTools (subcomponent Integration Broker) and is applicable to version 8.54 and 8.55. The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools; successful att...

CVE-2017-10248

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-10253

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Pivot Grid. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10249

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...