CVE-2023-22047

CVE-2023-22047 — Oracle PeopleSoft PeopleTools Portal (8.59, 8.60) is an unauthenticated, network-accessible vulnerability exposed via HTTP that can lead to unauthorized data access. The NUCLEI template documents an unauthenticated file-read path in the Portal component (WSRP Consumer ResourcePro...

CVE-2022-21481

CVE-2022-21481 affects Oracle PeopleSoft Enterprise FIN Cash Management (component: Financial Gateway) in version 9.2. A low-privilege attacker with network access over HTTP can exploit the vulnerability, with user interaction required, potentially leading to unauthorized update/insert/delete and...

CVE-2022-21639

CVE-2022-21639 affects Oracle PeopleSoft Enterprise PeopleTools with Elastic Search Integration (versions 8.59–8.60). An unauthenticated attacker can exploit over HTTP; Human interaction is required. Impact includes unauthorized data updates/inserts/deletes and reads. CVSS v3.1 base score 6.1 (Co...

CVE-2010-0080

CVE-2010-0080 affects Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne: PeopleSoft Enterprise HCM – eProfile, version bundles 8.9 Bundle #21 and 9.0 Bundle #11. The vulnerability targets the eProfile component and can be exploited by remote authenticated users to compromise confidentiali...

CVE-2009-1987

CVE-2009-1987 affects Oracle PeopleSoft Enterprise PeopleTools – Enterprise Portal (PIB: 8.49.21). The connected Nessus entry for PEOPLESOFT_JMSLCA_ACTIVITY_XSS.NASL documents a cross-site scripting (XSS) vulnerability in the JMS Listening Connector Activity parameter: input handling is not sanit...

CVE-2008-5456

The CVE-2008-5456 entry describes an unspecified vulnerability in the PeopleSoft Enterprise HRMS component of Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8, allowing remote authenticated users to affect confidentiality and integrity via unknown vectors. The CVSSv2 bas...

CVE-2008-5463

Technical details for CVE-2008-5463 are not provided in the supplied documents; no affected product/version or exploit vectors are disclosed here. Monitor for updates from official advisories and CVE records.

CVE-2009-3406

CVE-2009-3406 affects Oracle PeopleSoft/JD Edwards tools: JD Edwards Tools, version 8.98.2.1. The vulnerability is in the JD Edwards Tools component and allows remote authenticated users to affect confidentiality via unknown vectors (Adjacent Network/ JDENET context shown in the connected risk ma...

CVE-2024-21283

CVE-2024-21283 affects Oracle PeopleSoft Enterprise HCM Global Payroll Core (component: Global Payroll for Core) and is observed in 9.2.48–9.2.50. Connected sources confirm an authorization weakness in the Global Payroll for Core that allows a low-privilege, network-access attacker (via HTTP) to ...

CVE-2008-2620

CVE-2008-2617 affects PeopleSoft PeopleTools in Oracle PeopleSoft Enterprise/JD Edwards EnterpriseOne, specifically versions 8.48.17 and 8.49.11. The entry describes an unspecified vulnerability with remote, authenticated attack vectors; the risk matrix indicates a Network protocol with a valid s...

CVE-2019-2519

CVE-2019-2519 affects Oracle PeopleSoft 9.2, specifically the Manage Requisition Status subcomponent of PeopleSoft Enterprise SCM eProcurement. The connected sources confirm a vulnerability in that component that could allow an unauthenticated attacker, over HTTP with network access and with user...

CVE-2007-0297

CVE-2007-0297 describes an unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne versions 8.47.11 and 8.48.06, with the issue located in PeopleTools (aka PSE03). The impact and attacker methods are not disclosed in the provided documents. The connected sources con...

CVE-2008-1829

Mode C: The connected sources show concrete remediation details for CVE-2008-1829 in Wireshark. Debian DSA-1942-1 fixes several vulnerabilities in wireshark, including CVE-2008-1829. Specifically, Wireshark 0.99.4-5.etch (Etch) and Wireshark 1.0.2-3+lenny7 (Lenny) are listed as fixes, with older ...

CVE-2009-1988

The CVE-2009-1988 entry affects the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne, specifically versions 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9. The vulnerability is described as unspecified, allowing remote authenticated user...

CVE-2010-0877

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2008-2622

CVE-2008-2622 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools (PeopleSoft/JD Edwards) affecting version 8.48.17 and 8.49.11. The connected PeopleSoft PeopleTools risk matrix entry identifies the vulnerability as network-exploitable with HTTP transport, requiring a valid session, an...

CVE-2008-4007

CVE-2008-4007 concerns the PeopleSoft Enterprise Components component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18. The description indicates an unspecified vulnerability that allows remote authenticated users to affect confidentiality, integrity, and availability via unkno...

CVE-2011-0840

Affected product : Oracle PeopleSoft Enterprise PeopleTools 8.49 GA through 8.49.30. Vulnerability (summary) : Unspecified vulnerability allowing remote authenticated users to affect confidentiality via unknown vectors related to File Processing. Root cause / details : Not specified in the provid...

CVE-2024-21286

CVE-2024-21286 affects Oracle PeopleSoft Enterprise ELM Enterprise Learning Management (component: Enterprise Learning Management) on PeopleSoft 9.2. Root cause: an authorization issue in ELM allows a low-privileged attacker with network access via HTTP to compromise the application; attacks requ...

CVE-2007-5532

Technical details for CVE-2007-5532 are not publicly available in the provided documents. Monitor for updates in case more information becomes available.

CVE-2008-4000

CVE-2008-4000 concerns an authentication weakness in Oracle PeopleTools used by PeopleSoft Enterprise and JD Edwards EnterpriseOne (notably PeopleTools 8.49.14 and 8.48.18). The Imperva advisory (SecurityVULNS:DOC:20750) details that the system’s authentication and account lockout can be bypassed...

CVE-2009-0982

CVE-2009-0982 affects Oracle PeopleSoft Enterprise: PeopleTools 8.49.19 with an unspecified vulnerability in the PeopleTools component, allowing remote authenticated users to impact integrity via unknown vectors. The CVE is tied to Oracle’s April 2009 CPU Patch Update, which addresses multiple vu...

CVE-2009-3405

CVE-2009-3405 affects Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne (JD Edwards Tools), specifically JD Edwards Tools version 8.98.1.4. The vulnerability is described as unspecified, allowing remote authenticated users to impact integrity and availability. The CVSS-based context indic...

CVE-2008-2616

CVE-2008-2616 affects Oracle PeopleSoft Enterprise PeopleTools (8.48.17, 8.49.11). The connected PeopleSoft/JD Edwards entry shows this vulnerability as network-facing with a valid-session requirement and a CVSSv2 base score of 4.9 (Medium). The impact is not described beyond remote authenticated...

CVE-2008-2621

CVE-2008-2621 affects Oracle PeopleSoft Enterprise (PeopleTools) with 8.48.17 and 8.49.11. The connected PeopleSoft/JD Edwards entry lists CVE-2008-2621 under PeopleSoft PeopleTools with a CVSS v2 base score of 4.0 (Medium). The risk matrix indicates the vulnerability requires a valid session (au...

CVE-2009-1014

Technical details for CVE-2009-1014 are not publicly available in the provided connected documents; no specific affected product/version, vulnerability vector, or remediation details are supplied. Monitor for updates.

CVE-2005-3462

Technical details about CVE-2005-3462 are not publicly provided in the supplied documents. No affected products, vulnerable components, or exploitation details are disclosed here. Monitor for updates from official advisories.

CVE-2007-3870

Technical details (affected product/version, root cause, impact, exploit information) are not publicly provided in the supplied documents. Monitor for updates from official advisories and third-party analyses.

CVE-2008-2618

CVE-2008-2618 affects Oracle PeopleSoft Enterprise/ JD Edwards JD Edwards PeopleTools: vulnerable component is PeopleSoft PeopleTools, with affected versions 8.48.17 and 8.49.11. The linked risk matrix lists CVSSv2 base score 6.5 (AV:N/AC:L/Au:S/C:P/I:P/A:P). Attack surface noted as HTTP with a v...

CVE-2006-1886

The CVE refers to CVE-2006-1886: an unspecified vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise, impacting version 8.46.12 and 8.47.04. The initial description provides no explicit root cause, impact, or attack vectors; public sources label the vulnerability as unknown/...

CVE-2007-0295

CVE-2007-0295 affects Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne, specifically PeopleTools (aka PSE01). Affected versions are 8.22.13 and 8.47.11. The vulnerability is described as unspecified with unknown impact and attack vectors in PeopleTools; CVSS 2.0 vector indicates NETWORK ...

CVE-2009-1989

CVE-2009-1989 affects PeopleSoft Enterprise Financial Management System (FMS) in Oracle PeopleSoft/JD Edwards: vulnerable component is PeopleSoft Enterprise FMS; affected versions are 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24. The vulnerability allows remote authenticated users to affect confiden...

CVE-2009-3404

CVE-2009-3404 affects Oracle PeopleSoft PeopleTools & Enterprise Portal (PeopleSoft/JD Edwards) with product version 8.49.23. The vulnerability is described as unspecified and requires a valid session (authenticated access) to impact integrity, with no remote exploitation without authentication. ...

CVE-2022-21602

CVE-2022-21602 affects Oracle PeopleSoft PeopleTools Portal for PeopleTools versions 8.58–8.60. An unauthenticated, network-accessible attacker over HTTP can read a subset of PeopleSoft data. CVSS 3.1 Base Score 5.3 (Confidentiality). Remediation is available via Oracle’s Oct 2022 Critical Patch ...

CVE-2008-2615

CVE-2008-2615 is a PeopleSoft PeopleTools vulnerability affecting Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne. The connected PeopleSoft entry specifies that the issue affects PeopleTools components in 8.48.17 and 8.49.11 and can be exploited over HTTP with a valid session. The Oracl...

CVE-2008-5451

CVE-2008-5451 affects the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5. The vulnerability is described as allowing remote authenticated users to affect confidentiality via unknown vectors. The root cause, exact exploit path, and affected version...

CVE-2010-4434

Technical details about CVE-2010-4434 are not provided in the supplied documents; no specifics on affected versions, root cause, or impact are included. Monitor for updates.

CVE-2005-3463

Technical details for CVE-2005-3463 are not publicly provided in the supplied documents. The records note an unspecified vulnerability with unknown impact/vectors in Oracle PeopleSoft 8.44–8.46.03; monitor for updates.

CVE-2007-0296

Technical details, affected products/versions, root cause and impact for CVE-2007-0296 are not provided in the connected documents. No public specifics are available here; monitor for updates from official advisories and security databases.

CVE-2007-3868

CVE-2007-3868 affects Oracle PeopleSoft Enterprise’s PeopleTools component, with vulnerable versions listed as 8.22.15, 8.47.13, 8.48.10, and 8.49.02 . The description notes multiple unspecified vulnerabilities in PeopleTools that could allow remote authenticated users or attackers to impact the ...

CVE-2007-3869

Technical details, affected products/versions, root cause and exploit information for CVE-2007-3869 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2008-4001

Technical details for CVE-2008-4001 are not publicly available in the provided documents. Monitor for updates from primary sources to obtain affected products, impact, and remediation information.

CVE-2021-2151

The CVE-2021-2151 issue affects Oracle PeopleSoft Enterprise PeopleTools (Security component) in versions 8.56, 8.57, and 8.58. The Red Hat, NVD, CNVD, and CVE listings corroborate a vulnerability enabling a high-privileged attacker with network access via HTTP to compromise PeopleSoft PeopleTool...

CVE-2005-3464

Technical details for CVE-2005-3464 are not publicly available in the provided documents. No concrete affected products, versions, impact, or remediation are disclosed; monitor for updates and additional references.

CVE-2006-5376

CVE-2006-5376 concerns multiple unspecified vulnerabilities in the PeopleTools component of Oracle PeopleSoft Enterprise across several releases (8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA and numbered updates). The description indicates unknown impact and remote authenticated attack vectors (PSE04, PSE0...

CVE-2008-5455

CVE-2008-5455 describes an unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18, allowing remote authenticated users to affect confidentiality and integrity via unknown vectors. Public details indi...

CVE-2009-0998

CVE-2009-0998 affects the PeopleSoft Enterprise HRMS eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne, specifically versions 8.9.18 and 9.0.8. The vulnerability is described as an unspecified issue that allows remote authenticated users to compromise confidentialit...

CVE-2010-0878

Technical details for CVE-2010-0878 are not provided in the connected documents. Details remain unspecified here. Monitor Oracle CPU/PSO advisories and CVE records for future updates, mitigations, or affected product information.

CVE-2010-0879

CVE-2010-0879 affects Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne via the PeopleTools component, specifically in versions 8.49.26 and 8.50.07. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality through unknown vectors. The av...

CVE-2010-4424

CVE-2010-4424 affects Oracle PeopleSoft and JDEdwards suite via the PeopleSoft Enterprise PeopleTools component. Affected versions include 8.49.0–8.49.29, 8.50.0–8.50.14, and 8.51.0–8.51.04. The vulnerability is described as an unspecified issue in the Security sub-component that allows remote at...