Oracle Peoplesoft Enterprise Peopletools vulnerabilities
433 known vulnerabilities affecting oracle/peoplesoft_enterprise_peopletools.
Total CVEs
433
CISA KEV
2
actively exploited
Public exploits
15
Exploited in wild
8
Severity breakdown
CRITICAL26HIGH111MEDIUM273LOW23
Vulnerabilities
Page 20 of 22
CVE-2019-3023P4MEDIUMCVSS 4.7v8.56v8.572019-10-16
CVE-2019-3023 [MEDIUM] CVE-2019-3023: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Styl
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a p
nvd
CVE-2017-3536P4MEDIUMCVSS 4.6v8.54v8.552017-04-24
CVE-2017-3536 [MEDIUM] CVE-2017-3536: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interac
nvd
CVE-2019-2408P4MEDIUMCVSS 4.3v8.55v8.56+1 more2019-01-16
CVE-2019-2408 [MEDIUM] CVE-2019-2408: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Feeds). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human inter
nvd
CVE-2018-2820P4MEDIUMCVSS 4.3v8.54v8.55+1 more2018-04-19
CVE-2018-2820 [MEDIUM] CVE-2018-2820: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnera
nvd
CVE-2025-21530P4MEDIUMCVSS 4.3v8.60v8.612025-01-21
CVE-2025-21530 [MEDIUM] CWE-125 CVE-2025-21530: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Pane
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerabilit
nvd
CVE-2025-61750P4MEDIUMCVSS 4.3v8.61v8.622025-10-21
CVE-2025-61750 [MEDIUM] CWE-200 CVE-2025-61750: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Quer
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can resu
nvd
CVE-2020-1968P4LOWCVSS 3.7v8.56v8.57+1 more2020-09-09
CVE-2020-1968 [LOW] CWE-203 CVE-2020-1968: The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can
nvd
CVE-2020-2687P4MEDIUMCVSS 4.3v8.56v8.572020-01-15
CVE-2020-2687 [MEDIUM] CVE-2020-2687: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elas
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from
nvd
CVE-2013-3759P4MEDIUMCVSS 4.3v8.52v8.532013-07-17
CVE-2013-3759 [MEDIUM] CVE-2013-3759: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors related to PIA Search Functionality.
nvd
CVE-2020-14600P4MEDIUMCVSS 4.3v8.56v8.57+1 more2020-07-15
CVE-2020-14600 [MEDIUM] CVE-2020-14600: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from
nvd
CVE-2018-2970P4MEDIUMCVSS 4.3v8.55v8.562018-07-18
CVE-2018-2970 [MEDIUM] CVE-2018-2970: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this
nvd
CVE-2019-2573P4MEDIUMCVSS 4.3v8.56v8.572019-04-23
CVE-2019-2573 [MEDIUM] CVE-2019-2573: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subc
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks req
nvd
CVE-2019-3015P4MEDIUMCVSS 4.3v8.56v8.572019-10-16
CVE-2019-3015 [MEDIUM] CVE-2019-3015: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Inte
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can r
nvd
CVE-2019-2586P4MEDIUMCVSS 4.3v8.55v8.56+1 more2019-04-23
CVE-2019-2586 [MEDIUM] CVE-2019-2586: Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (s
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: RemoteCall). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this v
nvd
CVE-2021-2377P4MEDIUMCVSS 4.3v8.57v8.58+1 more2021-07-21
CVE-2021-2377 [MEDIUM] CVE-2021-2377: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in
nvd
CVE-2026-60745P4MEDIUMCVSS 4.4≥ 8.61, ≤ 8.632026-10-20
CVE-2026-60745 [MEDIUM] CWE-200 CVE-2026-60745: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Appl
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Ente
nvd
CVE-2026-87352P4MEDIUMCVSS 4.4≥ 8.61, ≤ 8.632026-10-20
CVE-2026-87352 [MEDIUM] CWE-863 CVE-2026-87352: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. S
nvd
CVE-2025-30747P4MEDIUMCVSS 4.3v8.60v8.61+1 more2025-07-15
CVE-2025-30747 [MEDIUM] CWE-863 CVE-2025-30747: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require hu
nvd
CVE-2026-87348P4MEDIUMCVSS 4.2≥ 8.61, ≤ 8.632026-10-20
CVE-2026-87348 [MEDIUM] CWE-552 CVE-2026-87348: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Upda
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Ente
nvd
CVE-2026-60809P4MEDIUMCVSS 4.2≥ 8.61, ≤ 8.632026-10-20
CVE-2026-60809 [MEDIUM] CWE-200 CVE-2026-60809: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Webl
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the PeopleSoft Enterprise PeopleTools execut
nvd