Oracle Peoplesoft Enterprise Peopletools vulnerabilities
433 known vulnerabilities affecting oracle/peoplesoft_enterprise_peopletools.
Total CVEs
433
CISA KEV
2
actively exploited
Public exploits
15
Exploited in wild
8
Severity breakdown
CRITICAL26HIGH111MEDIUM273LOW23
Vulnerabilities
Page 19 of 22
CVE-2018-3135P4MEDIUMCVSS 4.7v8.55v8.562018-10-17
CVE-2018-3135 [MEDIUM] CVE-2018-3135: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interactio
nvd
CVE-2018-3262P4MEDIUMCVSS 4.7v8.55v8.56+1 more2018-10-17
CVE-2018-3262 [MEDIUM] CVE-2018-3262: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human
nvd
CVE-2018-2785P4MEDIUMCVSS 4.7v8.54v8.55+1 more2018-04-19
CVE-2018-2785 [MEDIUM] CVE-2018-2785: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human
nvd
CVE-2023-21981P4MEDIUMCVSS 4.9v8.58v8.59+1 more2023-04-18
CVE-2023-21981 [MEDIUM] CVE-2023-21981: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elas
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.58, 8.59 and 8.60. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability
nvd
CVE-2026-101489P4MEDIUMCVSS 4.3≥ 8.61, ≤ 8.632026-10-20
CVE-2026-101489 [MEDIUM] CWE-863 CVE-2026-101489: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can resul
nvd
CVE-2020-9488P4LOWCVSS 3.7v8.56v8.57+1 more2020-04-27
CVE-2020-9488 [LOW] CWE-295 CVE-2020-9488: Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allo
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
nvd
CVE-2026-87350P4MEDIUMCVSS 4.5≥ 8.61, ≤ 8.632026-10-20
CVE-2026-87350 [MEDIUM] CWE-863 CVE-2026-87350: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Secu
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTo
nvd
CVE-2021-22924P4LOWCVSS 3.7v8.57v8.58+1 more2021-08-05
CVE-2021-22924 [LOW] CWE-20 CVE-2021-22924: libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or c
nvd
CVE-2013-2409P4MEDIUMCVSS 5.0v8.51v8.52+1 more2013-04-17
CVE-2013-2409 [MEDIUM] CVE-2013-2409: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via vectors related to PIA Core Technology.
nvd
CVE-2017-10382P4MEDIUMCVSS 4.7v8.54v8.55+1 more2017-10-19
CVE-2017-10382 [MEDIUM] CVE-2017-10382: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks req
nvd
CVE-2019-2490P4MEDIUMCVSS 4.7v8.55v8.56+1 more2019-01-16
CVE-2019-2490 [MEDIUM] CVE-2019-2490: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Panel Processor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require h
nvd
CVE-2018-3129P4MEDIUMCVSS 4.3v8.55v8.56+1 more2018-10-17
CVE-2018-3129 [MEDIUM] CVE-2018-3129: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human inte
nvd
CVE-2016-8294P4MEDIUMCVSS 4.3v8.54v8.552016-10-25
CVE-2016-8294 [MEDIUM] CWE-200 CVE-2016-8294: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2016-0471P4MEDIUMCVSS 4.3v8.53v8.542016-01-21
CVE-2016-0471 [MEDIUM] CVE-2016-0471: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote attackers to affect confidentiality via unknown vectors related to Multichannel Framework.
nvd
CVE-2016-0463P4MEDIUMCVSS 4.3v8.53v8.54+1 more2016-01-21
CVE-2016-0463 [MEDIUM] CVE-2016-0463: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality via unknown vectors related to Portal.
nvd
CVE-2018-2809P4MEDIUMCVSS 4.3v8.54v8.55+1 more2018-04-19
CVE-2018-2809 [MEDIUM] CVE-2018-2809: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attac
nvd
CVE-2026-60878P4MEDIUMCVSS 4.4v8.61v8.622026-10-20
CVE-2026-60878 [MEDIUM] CWE-200 CVE-2026-60878: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Proc
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human in
nvd
CVE-2026-60884P4MEDIUMCVSS 4.4≥ 8.61, ≤ 8.632026-08-18
CVE-2026-60884 [MEDIUM] CWE-284 CVE-2026-60884: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Pane
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interact
nvd
CVE-2016-3435P4MEDIUMCVSS 4.7v8.53v8.54+1 more2016-04-21
CVE-2016-3435 [MEDIUM] CVE-2016-3435: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect availability via vectors related to PIA Core Technology.
nvd
CVE-2020-8284P4LOWCVSS 3.7v8.582020-12-14
CVE-2020-8284 [LOW] CWE-200 CVE-2020-8284: A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting ba
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
nvd