CVE-2019-0227

The CVE-2019-0227 entry concerns an SSRF in Apache Axis 1.4 (last released in 2006). The connected IBM bulletins confirm Axis 1.x vulnerability details and state Axis 2 is the successor, with 1.7.9 (Axis2) being not vulnerable. Affected Axis 1.x components are legacy; remediation is to upgrade to...

CVE-2018-8032

CVE-2018-8032 affects Apache Axis 1.x (up to 1.4) with a cross-site scripting (XSS) vulnerability in the default servlet/services. This vulnerability is documented in IBM/PM security bulletins linked to Axis, confirming an XSS flaw (CWE-79) in Axis 1.x and indicating broader IBM product exposure....

CVE-2019-2951

CVE-2019-2951 affects Oracle PeopleSoft Enterprise HCM Human Resources (US Federal Specific) 9.2. The vulnerability allows a low-privileged attacker with network access via HTTP to read a subset of data; CVSS 3.1 base score 4.3 (C:L, I:N, A:N). Connected sources (RH/CVE-2019-2951, NVD/NVD, CNVD, ...

CVE-2020-2561

CVE-2020-2561 affects Oracle PeopleSoft Enterprise HCM Human Resources (component: Company Dir / Org Chart Viewer) on version 9.2. The vulnerability is remote, exploitable over HTTP, and allows a low-privilege attacker to read a subset of data from the HCM HR module; CVSSv3.1 base score 4.3 (Conf...

CVE-2017-10306

CVE-2017-10306 affects Oracle PeopleSoft Enterprise HCM (Security subcomponent) in version 9.2. The vulnerability allows a low-privileged, network-accessing attacker (HTTP) to perform unauthorized updates, inserts, deletes, and read access to PeopleSoft HCM data after user interaction. CVSS 3.0 b...

CVE-2017-10304

The CVE-2017-10304 vulnerability affects Oracle PeopleSoft Enterprise HCM (Security subcomponent) in version 9.2. The issue is exploitable over HTTP with network access, requiring user interaction, and can lead to unauthorized read, update, insert, or delete of PeopleSoft HCM data (confidentialit...

CVE-2018-2654

The CVE-2018-2654 entry describes a vulnerability in Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise HCM Human Resources component, subcomponent Company Dir / Org Chart Viewer (version 9.2 affected). An unauthenticated attacker who can reach the system over HTTP can compromise ...

CVE-2023-21992

CVE-2023-21992 affects Oracle PeopleSoft Enterprise HCM Human Resources, component Administer Workforce, in version 9.2. The vulnerability arises from insufficient input validation, enabling a low-privileged, network-accessible attacker (via HTTP) to perform unauthorized update/insert/delete and ...

CVE-2016-0407

CVE-2016-0407 affects Oracle PeopleSoft Enterprise HCM (Fusion HR Talent Integration) in PeopleSoft Products v9.1 and v9.2. The vulnerability is described as an unspecified issue that allows remote authenticated users to access data and compromise confidentiality. Affected component/area: Fusion ...

CVE-2018-2681

CVE-2018-2681 affects Oracle PeopleSoft Enterprise HCM Human Resources (Security subcomponent) in version 9.2. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to cause unauthorized updates, inserts, or deletes and unauthorized reads of a subset of HCM H...

CVE-2018-3068

CVE-2018-3068 affects Oracle PeopleSoft Enterprise HCM Human Resources (subcomponent: Compensation), specifically the 9.2 line. The vulnerability allows unauthenticated, network-accessing users to interact via HTTP and exploit underlying flaws to perform unauthorized updates, inserts, deletes, an...