Vulnerabilities > Oracle > Peoplesoft Enterprise Peopletools > High

DATE CVE VULNERABILITY TITLE RISK
2017-10-19 CVE-2017-10335 Information Exposure vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.55/8.56
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search).
network
low complexity
oracle CWE-200
7.5
2017-08-08 CVE-2017-10146 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.54/8.55
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal).
network
low complexity
oracle
8.3
2017-08-08 CVE-2017-10061 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.54/8.55
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker).
network
low complexity
oracle
8.3
2017-08-08 CVE-2017-10019 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.54/8.55
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker).
network
low complexity
oracle
7.4
2017-04-24 CVE-2017-3547 Injection vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.54/8.55
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework).
network
low complexity
oracle CWE-74
7.4
2017-04-24 CVE-2017-3519 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.54/8.55
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security).
network
low complexity
oracle
7.5
2016-10-25 CVE-2016-8296 Improper Access Control vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.54/8.55
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to LDAP.
network
low complexity
oracle CWE-284
7.6
2016-10-25 CVE-2016-8293 Improper Access Control vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.54/8.55
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and CVE-2016-5530.
network
low complexity
oracle CWE-284
8.2
2016-10-25 CVE-2016-8291 Improper Access Control vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.54/8.55
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.
network
low complexity
oracle CWE-284
8.2
2016-07-21 CVE-2016-5472 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.54/8.55
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity, and availability via vectors related to Install and Packaging.
local
low complexity
oracle
7.8