Code injection

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-10258

The CVE-2017-10258 vulnerability affects Oracle PeopleSoft Enterprise PRTL Interaction Hub (subcomponent: Add New Image) in version 9.1.0. It enables an unauthenticated, network-accessible attacker (via HTTP) to read and modify data, with human interaction required. The issue’s root cause and pre...

CVE-2017-10215

CVE-2017-10215 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub, subcomponent EPPCM_DEFN_CATG , in version 9.1.0 . An unauthenticated attacker with network access via HTTP can compromise the hub; attacks require user interaction from a person other than the attacker. Impact includes unau...

CVE-2017-10126

CVE-2017-10126 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub, HTML Area subcomponent, in version 9.1.0. The vulnerability is exploitable over HTTP with network access and does not require attacker authentication, but it requires user interaction (UI:R). The issue can lead to unauthori...

CVE-2017-10256

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-10070

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Maintenance Folders. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10247

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: HTML Area. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10257

CVE-2017-10257 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub (Browse Folder Hierarchy subcomponent) in version 9.1.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the hub, with user interaction required for exploitation. Consequences ...

CVE-2017-10100

CVE-2017-10100 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub (HTML Area subcomponent) in PeopleSoft 9.1.0. A remote attacker can exploit via HTTP to gain unauthorized read, update, insert, or delete access to data, with the attack requiring human interaction from a user. The vulnerabi...

CVE-2017-10247

CVE-2017-10247 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub HTML Area (in PeopleSoft 9.1.0). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise data; attempts require user interaction. Impact includes unauthorized read and, for some data, ...

Oracle PeopleSoft Enterprise PRTL Interaction Hub Remote Vulnerability (CNVD-2017-27230)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PRTL Interaction Hub is one of the enterprise and Customer Interaction...

Oracle PeopleSoft Enterprise PRTL Interaction Hub Remote Vulnerability (CNVD-2017-27174)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PRTL Interaction Hub is one of the enterprise and Customer Interaction...