Peoplesoft Enterprise Pt Peopletools Security Vulnerabilities and Issues — Peoplesoft Enterprise Pt Peopletools CVE List

Lucene search

OraclePeoplesoft Enterprise Pt Peopletools

33 matches found

CVE•added 2019/08/20 9:15 p.m.•820 views

CVE-2019-10086

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.

7.5CVSS7.3AI score0.00317EPSS

CVE•added 2019/12/12 3:15 a.m.•507 views

CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

7.5CVSS7.1AI score0.02166EPSS

CVE•added 2019/08/30 9:15 a.m.•191 views

CVE-2019-12402

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.

7.5CVSS7.1AI score0.00149EPSS

CVE•added 2019/07/23 11:15 p.m.•49 views

CVE-2019-2599

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pagelet Wizard). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise ...

6.5CVSS6.1AI score0.00452EPSS

CVE•added 2019/01/16 7:30 p.m.•46 views

CVE-2019-2433

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: XML Publisher). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Peo...

7.2CVSS6.8AI score0.01644EPSS

CVE•added 2019/10/16 6:15 p.m.•45 views

CVE-2019-2915

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise Peop...

6.1CVSS5.6AI score0.008EPSS

CVE•added 2019/01/16 7:30 p.m.•44 views

CVE-2019-2416

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

8.8CVSS8.1AI score0.02066EPSS

CVE•added 2019/01/16 7:30 p.m.•44 views

CVE-2019-2439

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

6.1CVSS5.5AI score0.00621EPSS

CVE•added 2019/01/16 7:30 p.m.•42 views

CVE-2019-2490

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Panel Processor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise P...

4.7CVSS4AI score0.0083EPSS

CVE•added 2019/10/16 6:15 p.m.•42 views

CVE-2019-2932

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise Peo...

7.7CVSS7.3AI score0.00601EPSS

CVE•added 2019/01/16 7:30 p.m.•41 views

CVE-2019-2417

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

6.5CVSS5.6AI score0.00588EPSS

CVE•added 2019/04/23 7:32 p.m.•41 views

CVE-2019-2594

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compr...

6.8CVSS6.5AI score0.00749EPSS

CVE•added 2019/07/23 11:15 p.m.•41 views

CVE-2019-2748

7.1CVSS6.3AI score0.00232EPSS

CVE•added 2019/10/16 6:15 p.m.•41 views

CVE-2019-3015

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

4.3CVSS3.6AI score0.00302EPSS

CVE•added 2019/10/16 6:15 p.m.•39 views

CVE-2019-2985

6.1CVSS5.6AI score0.008EPSS

CVE•added 2019/10/16 6:15 p.m.•39 views

CVE-2019-3023

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise Peop...

4.7CVSS4.2AI score0.00978EPSS

CVE•added 2019/01/16 7:30 p.m.•38 views

CVE-2019-2499

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com...

6.1CVSS5.5AI score0.00621EPSS

CVE•added 2019/10/16 6:15 p.m.•38 views

CVE-2019-2929

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTo...

6.1CVSS5.6AI score0.008EPSS

CVE•added 2019/10/16 6:15 p.m.•38 views

CVE-2019-2931

6.1CVSS5.6AI score0.008EPSS

CVE•added 2019/10/16 6:15 p.m.•38 views

CVE-2019-3014

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterp...

6.1CVSS5.6AI score0.008EPSS

CVE•added 2019/01/16 7:30 p.m.•37 views

CVE-2019-2404

5.3CVSS4.4AI score0.00821EPSS

CVE•added 2019/01/16 7:30 p.m.•37 views

CVE-2019-2423

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise People...

6.1CVSS5.5AI score0.00621EPSS

CVE•added 2019/01/16 7:30 p.m.•37 views

CVE-2019-2442

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise People...

6.1CVSS5.5AI score0.00621EPSS

CVE•added 2019/04/23 7:32 p.m.•37 views

CVE-2019-2573

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compro...

4.3CVSS3.5AI score0.00978EPSS

CVE•added 2019/01/16 7:30 p.m.•36 views

CVE-2019-2408

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Feeds). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft ...

4.3CVSS3.3AI score0.00867EPSS

CVE•added 2019/04/23 7:32 p.m.•36 views

CVE-2019-2586

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: RemoteCall). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Peop...

4.3CVSS3.4AI score0.00302EPSS

CVE•added 2019/04/23 7:32 p.m.•36 views

CVE-2019-2637

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

6.1CVSS5.5AI score0.008EPSS

CVE•added 2019/01/16 7:30 p.m.•35 views

CVE-2019-2443

7.2CVSS6.8AI score0.01644EPSS

CVE•added 2019/07/23 11:15 p.m.•35 views

CVE-2019-2772

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Pe...

6.1CVSS5.5AI score0.00582EPSS

CVE•added 2019/01/16 7:30 p.m.•34 views

CVE-2019-2471

6.1CVSS5.5AI score0.00621EPSS

CVE•added 2019/01/16 7:30 p.m.•33 views

CVE-2019-2405

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleS...

7.5CVSS7.4AI score0.01056EPSS

CVE•added 2019/04/23 7:32 p.m.•32 views

CVE-2019-2598

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft En...

8.7CVSS7.8AI score0.01041EPSS

CVE•added 2019/04/23 7:32 p.m.•29 views

CVE-2019-2597

5.8CVSS4.8AI score0.008EPSS