CVE-2017-3521

CVE-2017-3521 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise SCM Purchasing component (Supplier Registration) on version 9.2. The vulnerability is described as exploitable over HTTP by a high-privilege attacker with network access, enabling unauthorized creation, delet...

CVE-2017-3548

The CVE-2017-3548 issue affects Oracle PeopleSoft Enterprise PeopleTools (subcomponent Integration Broker) with affected versions 8.54 and 8.55. It is an XML External Entity (XXE) vulnerability in the PeopleSoftServiceListeningConnector that allows an unauthenticated remote attacker, over HTTP, t...

CVE-2017-3547

CVE-2017-3547 affects Oracle PeopleSoft Enterprise PeopleTools (MultiChannel Framework) on affected ToolsRelease versions 8.54 and 8.55. The vulnerability enables unauthenticated attackers with network access via HTTP to compromise PeopleSoft PeopleTools, potentially leading to unauthorized creat...

EUVD-2017-12668

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-3527

CVE-2017-3527 affects Oracle PeopleSoft Enterprise PeopleTools Fluid Core subcomponent. Affects PeopleSoft versions 8.54 and 8.55. An unauthenticated attacker with network access via HTTP can read a subset of data from PeopleSoft Enterprise PeopleTools (unprivileged exposure). CVSS 3.0 base score...

PT-2017-15982

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.54 Oracle PeopleSoft Products version 8.55 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, resulting in unauthorized re...

Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component Remote Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Oracle PeopleSoft Enterprise PeopleTools Remote Vulnerability (CNVD-2017-06139)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle.PeopleSoftEnterprisePeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. Platform components. A securi...

Oracle PeopleSoft HCM 9.2 XXE Injection

Application: Oracle PeopleSoft Versions Affected: PeopleSoft HCM 9.2 on PeopleTools 8.55 Vendor URL: http://oracle.com Bug: XXE Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Author: Nadya Krivdyuk ERPScan Description 1...

Oracle PeopleSoft ToolsRelease / ToolsReleaseDB / HCM SSRF Vulnerabilities

Oracle PeopleSoft ToolsRelease version 8.55.03, ToolsReleaseDB version 8.55, and HCM version 9.2 suffer from a server-side request forgery vulnerability. Application: Oracle PeopleSoft Versions Affected: ToolsRelease: 8.55.03; ToolsReleaseDB: 8.55; PeopleSoft HCM 9.2 Vendor URL: http://oracle.com...

Oracle PeopleSoft HCM 9.2 XXE Injection Vulnerability

Exploit for windows platform in category remote exploits Application: Oracle PeopleSoft Versions Affected: PeopleSoft HCM 9.2 on PeopleTools 8.55 Vendor URL: http://oracle.com Bug: XXE Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April...

Oracle PeopleSoft ToolsRelease / ToolsReleaseDB / HCM SSRF

Application: Oracle PeopleSoft Versions Affected: ToolsRelease: 8.55.03; ToolsReleaseDB: 8.55; PeopleSoft HCM 9.2 Vendor URL: http://oracle.com Bugs: SSRF Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Author: Roman Shalymov...

Oracle PeopleSoft Enterprise SCM eBill Payment Remote Vulnerability

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise SCM eBill Payment is one of the electronic billing display solution...

Oracle PeopleSoft Enterprise PeopleTools Remote Vulnerability (CNVD-2017-05843)

Oracle PeopleSoft Enterprise integrates several business functions, including personnel, customer relationship, supply and demand, and financial management. A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools, which can be exploited by remote attackers to compromise...

Oracle PeopleSoft Enterprise SCM Strategic Sourcing Remote Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise SCM Strategic Sourcing is one of the Supply Chain Strategic Sourcing...

Oracle PeopleSoft Enterprise FSCM Remote Vulnerability

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. A security vulnerability exists in Oracle PeopleSoft Enterprise FSCM, which can be exploited by remote attackers to compromise confidentiality, integrity...

Oracle PeopleSoft Enterprise CS Campus Community Remote Vulnerability

Oracle PeopleSoft is a set of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise CS Campus Community is one of the campus management components. A security vulnerabili...

File Upload in Integration Gateway (PSIGW) - PeopleSoft

Application: Oracle PeopleSoft Versions Affected: PeopleTools 8.54, 8.55 Vendor: Oracle Bugs: File Upload Reported: 27.03.2017 Vendor response: 28.03.2017 Date of Public Advisory: 18.07.2017 Reference: Oracle CPU July 2017 Authors: Roman Shalymov ERPScan VULNERABILITY INFORMATION Class: File Uplo...

Directory Traversal Vulnerability in Integration Gateway (PSIGW)

Application: Oracle PeopleSoft Versions Affected: PeopleTools 8.54, 8.55 Vendor: Oracle Bugs: Directory Traversal Reported: 27.03.2017 Vendor response: 28.03.2017 Date of Public Advisory: 18.07.2017 Reference: Oracle CPU July 2017 Authors: Roman Shalymov ERPScan VULNERABILITY INFORMATION Class:...

Unauthorized Container Shutdown In ServerMigrationCoordinator

Application: Oracle PeopleSoft Versions Affected: PeopleSoft FSCM 9.2 Vendor: Oracle Bug: Missing Authentication for Critical Function Reported: 16.03.2017 Vendor response: 17.03.2017 Date of Public Advisory: 18.07.2017 Reference: Oracle CPU July 2017 Authors: Vahagn Vardanyan ERPScan VULNERABILI...