Vulnerabilities > Oracle > Peoplesoft Enterprise Peopletools > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-11-15 CVE-2018-5407 Information Exposure Through Discrepancy vulnerability in multiple products
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
4.7
2018-10-30 CVE-2018-0734 Use of a Broken or Risky Cryptographic Algorithm vulnerability in multiple products
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack.
network
high complexity
openssl canonical debian nodejs netapp oracle CWE-327
5.9
2018-10-29 CVE-2018-0735 Use of a Broken or Risky Cryptographic Algorithm vulnerability in multiple products
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack.
network
high complexity
openssl canonical debian nodejs netapp oracle CWE-327
5.9
2018-10-17 CVE-2018-3301 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.55/8.56
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology).
network
low complexity
oracle
6.1
2018-10-17 CVE-2018-3262 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.55/8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet).
network
low complexity
oracle
4.7
2018-10-17 CVE-2018-3261 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.55/8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker).
network
low complexity
oracle
5.3
2018-10-17 CVE-2018-3257 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.55/8.56
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology).
network
low complexity
oracle
6.1
2018-10-17 CVE-2018-3255 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.55/8.56/8.57
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core).
network
low complexity
oracle
6.1
2018-10-17 CVE-2018-3239 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.55/8.56
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker).
network
low complexity
oracle
5.3
2018-10-17 CVE-2018-3207 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.55/8.56
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal).
network
low complexity
oracle
6.1