Vulnerabilities > Oracle > Peoplesoft Enterprise Peopletools > 8.56

DATE CVE VULNERABILITY TITLE RISK
2020-03-07 CVE-2020-9281 Cross-site Scripting vulnerability in multiple products
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).
network
low complexity
ckeditor fedoraproject drupal oracle CWE-79
6.1
2020-01-15 CVE-2020-2687 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search).
network
low complexity
oracle
4.3
2020-01-15 CVE-2020-2663 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).
network
low complexity
oracle
6.1
2020-01-15 CVE-2020-2607 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).
network
low complexity
oracle
6.1
2020-01-15 CVE-2020-2606 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).
network
low complexity
oracle
6.1
2020-01-15 CVE-2020-2602 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager).
network
low complexity
oracle
6.1
2020-01-15 CVE-2020-2600 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search).
network
low complexity
oracle
6.1
2020-01-15 CVE-2020-2598 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Activity Guide).
network
low complexity
oracle
6.1
2019-12-06 CVE-2019-1551 Integer Overflow or Wraparound vulnerability in multiple products
There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli.
5.3
2019-10-16 CVE-2019-3023 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet).
network
low complexity
oracle
4.7