Oracle Peoplesoft Enterprise Peopletools vulnerabilities
385 known vulnerabilities affecting oracle/peoplesoft_enterprise_peopletools.
Total CVEs
385
CISA KEV
2
actively exploited
Public exploits
15
Exploited in wild
8
Severity breakdown
CRITICAL25HIGH105MEDIUM242LOW13
Vulnerabilities
Page 10 of 20
CVE-2017-3292P4MEDIUMCVSS 5.7v8.54v8.552017-01-27
CVE-2017-3292 [MEDIUM] CWE-200 CVE-2017-3292: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks requi
nvd
CVE-2026-21951P4MEDIUMCVSS 6.1v8.60v8.61+1 more2026-01-20
CVE-2026-21951 [MEDIUM] CWE-79 CVE-2026-21951: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Inte
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require hum
nvd
CVE-2026-34269P4MEDIUMCVSS 6.1v8.61v8.622026-04-21
CVE-2026-34269 [MEDIUM] CWE-284 CVE-2026-34269: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a
nvd
CVE-2018-3198P4MEDIUMCVSS 5.3v8.55v8.56+1 more2018-10-17
CVE-2018-3198 [MEDIUM] CVE-2018-3198: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerabil
nvd
CVE-2026-21934P4MEDIUMCVSS 5.4v8.60v8.61+1 more2026-01-20
CVE-2026-21934 [MEDIUM] CVE-2026-21934: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerabili
nvd
CVE-2021-3537P4MEDIUMCVSS 5.9v8.582021-05-14
CVE-2021-3537 [MEDIUM] CWE-476 CVE-2021-3537: A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors wh
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability
nvd
CVE-2021-27568P4MEDIUMCVSS 5.9v8.58v8.592021-02-23
CVE-2021-27568 [MEDIUM] CWE-754 CVE-2021-27568: An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. A
An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.
nvd
CVE-2016-3478P4MEDIUMCVSS 6.1v8.53v8.54+1 more2016-07-21
CVE-2016-3478 [MEDIUM] CVE-2016-3478: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to File Processing.
nvd
CVE-2017-10106P4MEDIUMCVSS 6.1v8.54v8.552017-08-08
CVE-2017-10106 [MEDIUM] CVE-2017-10106: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interact
nvd
CVE-2017-3300P4MEDIUMCVSS 6.1v8.54v8.552017-01-27
CVE-2017-3300 [MEDIUM] CWE-79 CVE-2017-3300: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Multichannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks r
nvd
CVE-2018-3207P4MEDIUMCVSS 6.1v8.55v8.562018-10-17
CVE-2018-3207 [MEDIUM] CVE-2018-3207: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interactio
nvd
CVE-2018-3206P4MEDIUMCVSS 6.1v8.55v8.562018-10-17
CVE-2018-3206 [MEDIUM] CVE-2018-3206: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interactio
nvd
CVE-2016-5530P4MEDIUMCVSS 6.1v8.54v8.552016-10-25
CVE-2016-5530 [MEDIUM] CVE-2016-5530: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and CVE-2016-8293.
nvd
CVE-2016-5529P4MEDIUMCVSS 6.1v8.54v8.552016-10-25
CVE-2016-5529 [MEDIUM] CVE-2016-5529: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5530 and CVE-2016-8293.
nvd
CVE-2008-0343P4CRITICALCVSS 10.0v8.47v8.48+1 more2008-01-17
CVE-2008-0343 [CRITICAL] CVE-2008-0343: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8,
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06.
nvd
CVE-2025-53055P4MEDIUMCVSS 6.1≥ 8.60, ≤ 8.622025-10-21
CVE-2025-53055 [MEDIUM] CWE-125 CVE-2025-53055: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require hu
nvd
CVE-2018-3261P4MEDIUMCVSS 5.3v8.55v8.56+1 more2018-10-17
CVE-2018-3261 [MEDIUM] CVE-2018-3261: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of thi
nvd
CVE-2018-3202P4MEDIUMCVSS 5.3v8.55v8.562018-10-17
CVE-2018-3202 [MEDIUM] CVE-2018-3202: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vul
nvd
CVE-2018-3239P4MEDIUMCVSS 5.3v8.55v8.562018-10-17
CVE-2018-3239 [MEDIUM] CVE-2018-3239: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vuln
nvd
CVE-2017-3527P4MEDIUMCVSS 5.3v8.54v8.552017-04-24
CVE-2017-3527 [MEDIUM] CWE-200 CVE-2017-3527: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vu
nvd