CVE-2020-14612

CVE-2020-14612 affects Oracle PeopleSoft Time and Labor in the PeopleSoft Enterprise HRMS product, version 9.2. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to perform unauthorized updates, inserts, or deletes on PeopleSoft HRMS data, and to read a subset of da...

CVE-2020-2954

CVE-2020-2954 affects Oracle PeopleSofts Enterprise HRMS (component: Candidate Gateway) on version 9.2. The issue is described as an unauthenticated remote condition over HTTP that can, with user interaction, lead to unauthorized read and write access to data in PeopleSoft Enterprise HRMS and pot...

CVE-2019-2591

CVE-2019-2591 affects Oracle PeopleSoft Enterprise HRMS (subcomponent: Candidate Gateway) with affected version 9.2. The vulnerability allows unauthenticated network access via HTTP to compromise HRMS, requiring user interaction for exploitation, and may lead to unauthorized update/insert/delete ...

CVE-2016-8285

CVE-2016-8285 relates to an unspecified vulnerability in Oracle’s PeopleSoft Enterprise HCM 9.2, specifically within the Candidate Gateway subcomponent of PeopleSoft Enterprise HCM. The description notes that remote administrators could affect confidentiality and integrity via the Candidate Gatew...