CVE-2006-5377

Unspecified vulnerability in PeopleSoft component in Oracle PeopleSoft Enterprise 8.80 GA, 8.90 GA, 8.8 Bundle 11, and 8.9 Bundle 4 has unknown impact and remote authenticated attack vectors, aka Vuln PSE05...

CVE-2006-5375

Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote attack vectors, aka Vuln 1 PSE01, 2 PSE02, and 3 PSE03...

CVE-2006-5376

CVE-2006-5376 concerns multiple unspecified vulnerabilities in the PeopleTools component of Oracle PeopleSoft Enterprise across several releases (8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA and numbered updates). The description indicates unknown impact and remote authenticated attack vectors (PSE04, PSE0...

CVE-2006-3723

Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle 10 and 8.9 Bundle 3 has unknown impact and attack vectors, aka Oracle Vuln PSE02...

CVE-2006-3722

Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle 16, 8.8 Bundle 10, and 8.9 Bundle 3 has unknown impact and attack vectors, aka Oracle Vuln PSE01...

CVE-2006-3722

Technical details about CVE-2006-3722 are not provided in the supplied documents. No explicit affected product version, impact, exploitation, or remediation is present here. Monitor official advisories for updates.

CVE-2006-3722

Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle 16, 8.8 Bundle 10, and 8.9 Bundle 3 has unknown impact and attack vectors, aka Oracle Vuln PSE01...

CVE-2006-3723

Technical details for CVE-2006-3723 are not publicly available in the provided documents. Monitor for updates; no disclosed affected components, impact, or remediation are provided here.

CVE-2006-3723

Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle 10 and 8.9 Bundle 3 has unknown impact and attack vectors, aka Oracle Vuln PSE02...

Code injection

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown impact and attack vectors, aka Vuln PSE01...

CVE-2006-1886

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown impact and attack vectors, aka Vuln PSE01...

CVE-2006-1886

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown impact and attack vectors, aka Vuln PSE01...

CVE-2006-1886

The CVE refers to CVE-2006-1886: an unspecified vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise, impacting version 8.46.12 and 8.47.04. The initial description provides no explicit root cause, impact, or attack vectors; public sources label the vulnerability as unknown/...

Code injection

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...

CVE-2006-0584

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...

CVE-2006-0584

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...

CVE-2006-0584

CVE-2006-0584 affects PeopleSoft People Tools 8.4x where the PSCipher function uses PKCS #5 with a fixed DES key to store passwords. This enables local attackers to perform dictionary-style guessing by comparing output strings. The provided documents describe the root cause (fixed DES key) and im...

PeopleSoft (Oracle) PSCipher Encryption Weakness

Vendor: PeopleSoft Product: People Tools Version: 8.4x Platform: Multi-platform Title: Weak Encryption Description: PeopleSoft uses PSCipher for encryption/hashing purposes. Based on observations from the output of PSCipher and on our familiarity with the cryptographic library objects and methods...

Peoplesoft People Tools PSCipher() function weak encryption

Weak DES block cypher without feedback is used...

CVE-2006-0280

Unspecified vulnerability in Oracle PeopleSoft Enterprise Portal 8.4 Bundle 15, 8.8 Bundle 10, and 8.9 Bundle 2 has unspecified impact and attack vectors, as identified by Oracle Vuln PSE01...