Oracle Peoplesoft Enterprise Peopletools vulnerabilities
385 known vulnerabilities affecting oracle/peoplesoft_enterprise_peopletools.
Total CVEs
385
CISA KEV
2
actively exploited
Public exploits
15
Exploited in wild
8
Severity breakdown
CRITICAL25HIGH105MEDIUM242LOW13
Vulnerabilities
Page 12 of 20
CVE-2018-2788P4MEDIUMCVSS 6.1v8.55v8.562018-04-19
CVE-2018-2788 [MEDIUM] CVE-2018-2788: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human intera
nvd
CVE-2022-21520P4MEDIUMCVSS 6.1v8.58v8.592022-07-19
CVE-2022-21520 [MEDIUM] CVE-2022-21520: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Flui
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a
nvd
CVE-2023-22080P4MEDIUMCVSS 6.1v8.59v8.602023-10-17
CVE-2023-22080 [MEDIUM] CVE-2023-22080: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interactio
nvd
CVE-2024-21065P4MEDIUMCVSS 6.1v8.59v8.60+1 more2024-04-16
CVE-2024-21065 [MEDIUM] CWE-601 CVE-2024-21065: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Work
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human intera
nvd
CVE-2024-21178P4MEDIUMCVSS 6.1v8.59v8.60+1 more2024-07-16
CVE-2024-21178 [MEDIUM] CWE-79 CVE-2024-21178: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interacti
nvd
CVE-2025-30748P4MEDIUMCVSS 6.1v8.60v8.61+1 more2025-07-15
CVE-2025-30748 [MEDIUM] CWE-863 CVE-2025-30748: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require hu
nvd
CVE-2017-10045P4MEDIUMCVSS 5.3v8.54v8.552017-08-08
CVE-2017-10045 [MEDIUM] CVE-2017-10045: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require
nvd
CVE-2024-21202P4MEDIUMCVSS 6.1v8.59v8.60+1 more2024-10-15
CVE-2024-21202 [MEDIUM] CWE-352 CVE-2024-21202: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require hu
nvd
CVE-2018-3016P4MEDIUMCVSS 5.4v8.55v8.562018-07-18
CVE-2018-3016 [MEDIUM] CVE-2018-3016: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulne
nvd
CVE-2020-14806P4MEDIUMCVSS 5.3v8.56v8.57+1 more2020-10-21
CVE-2020-14806 [MEDIUM] CVE-2020-14806: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Quer
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can resul
nvd
CVE-2020-2775P4MEDIUMCVSS 5.3v8.56v8.57+1 more2020-04-15
CVE-2020-2775 [MEDIUM] CVE-2020-2775: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result
nvd
CVE-2020-14558P4MEDIUMCVSS 5.3v8.56v8.57+1 more2020-07-15
CVE-2020-14558 [MEDIUM] CVE-2020-14558: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can resu
nvd
CVE-2021-2407P4MEDIUMCVSS 5.3v8.57v8.58+1 more2021-07-21
CVE-2021-2407 [MEDIUM] CVE-2021-2407: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result
nvd
CVE-2023-21845P4MEDIUMCVSS 5.4v8.602023-01-18
CVE-2023-21845 [MEDIUM] CVE-2023-21845: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Pane
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). The supported version that is affected is 8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in
nvd
CVE-2026-21938P4MEDIUMCVSS 5.4v8.60v8.61+1 more2026-01-20
CVE-2026-21938 [MEDIUM] CVE-2026-21938: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from
nvd
CVE-2026-101491P4MEDIUMCVSS 5.0≥ 8.61, ≤ 8.632026-10-20
CVE-2026-101491 [MEDIUM] CWE-863 CVE-2026-101491: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Quer
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise
nvd
CVE-2019-10219P4MEDIUMCVSS 6.1v8.57v8.58+1 more2019-11-08
CVE-2019-10219 [MEDIUM] CWE-79 CVE-2019-10219: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properl
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
nvd
CVE-2017-10327P4MEDIUMCVSS 6.1v8.54v8.55+1 more2017-10-19
CVE-2017-10327 [MEDIUM] CVE-2017-10327: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human int
nvd
CVE-2017-10158P4MEDIUMCVSS 6.1v8.54v8.55+1 more2017-10-19
CVE-2017-10158 [MEDIUM] CVE-2017-10158: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Core). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human inte
nvd
CVE-2017-10253P4MEDIUMCVSS 6.1v8.54v8.552017-08-08
CVE-2017-10253 [MEDIUM] CVE-2017-10253: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pivot Grid). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human inte
nvd