Oracle PeopleSoft Enterprise PeopleTools vulnerabilities

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Database Server) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can exploit it with user interaction, causing hang or crash and data modification.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Report Distribution) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can exploit it with user interaction, causing data modification and denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component SQR) affecting versions 8.61-8.63. Difficult to exploit, requires high privileges, local logon, and user interaction; can lead to unauthorized data modification and complete DoS, with potential impact on other products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Report Distribution) affecting versions 8.61-8.63. Difficult to exploit, requires high privileges and network access via HTTP; can lead to unauthorized access to critical data, with potential impact on other products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Report Distribution component, affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized creation, deletion or modification of critical data and causing hang or repeatable crashes (complete DOS).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component SQR) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with network access via HTTP, allowing unauthorized access to critical data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Report Distribution) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with network access via HTTP, allowing unauthorized access to critical data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Analytic Server) affecting versions 8.61-8.63. A low-privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DOS).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Report Distribution component, affecting versions 8.61-8.63. Easily exploitable by an unauthenticated attacker with HTTP network access, allowing unauthorized access to critical data or complete access to all PeopleTools data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (SQR component) affecting versions 8.61-8.63. A low-privileged attacker with network access via HTTP can easily gain unauthorized creation, deletion or modification access to critical data, potentially impacting other products. CVSS 9.6.

A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Panel Processor component) in versions 8.61-8.63 allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access and unauthorized read access to a subset of data, requiring human interaction and potentially impacting additional products (scope change). CVSS 3.1 Base Score 4.4.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Portal component) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data.

Vulnerability in the Portal component of Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data, requiring user interaction and potentially impacting additional products.

Vulnerability in the Open Query component of Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62. A difficult to exploit flaw allows a high privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of data.

Vulnerability in the Data Mover component of Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63. A difficult to exploit flaw allows a high privileged attacker with logon to the infrastructure to perform unauthorized data modification, read a subset of data, and cause partial denial of service, requiring user interaction.

Vulnerability in the Application Server - JRE component of Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63. A difficult to exploit flaw allows an unauthenticated attacker with network access via SSH to perform unauthorized update, insert, or delete access to some data.

Vulnerability in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63. A difficult to exploit flaw allows a high privileged attacker with logon to the infrastructure to perform unauthorized data modification, read a subset of data, and cause partial denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Query) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of data, and the attack may impact additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Fluid Core) affecting versions 8.61-8.63. An unauthenticated attacker with HTTP network access can exploit a vulnerability requiring human interaction, causing unauthorized modification and read access to a subset of data and impacting additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Business Interlink) affecting versions 8.61-8.63. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of data and cause a partial denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can exploit a vulnerability requiring human interaction, causing unauthorized modification and read access to a subset of data and impacting additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Fluid Core) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can exploit a vulnerability requiring human interaction, causing unauthorized modification and read access to a subset of data and impacting additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Integration Broker) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can exploit it with user interaction.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Porting) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with local logon, it can cause a hang or frequently repeatable crash (complete DoS) and unauthorized data modification and read access.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Test Framework) affecting versions 8.61-8.63. Easily exploitable by an unauthenticated attacker with network access via HTTP, allowing unauthorized read access to a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Test Framework) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with local logon, it can lead to unauthorized data modification, read access, and partial denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Test Framework) affects versions 8.61-8.63. A low-privileged attacker with network access via HTTP can exploit it with user interaction, potentially impacting additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Test Framework) affecting versions 8.61-8.63. Easily exploitable by an unauthenticated attacker with local logon, allowing unauthorized access to critical data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. An unauthenticated attacker with logon to the infrastructure can exploit it with user interaction, potentially leading to takeover.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. A low-privileged attacker with network access via HTTP can exploit it, potentially leading to takeover.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Report Distribution) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with network access via HTTP, allowing unauthorized read access to a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, SQR component, affecting versions 8.61-8.63. Easily exploitable by an unauthenticated attacker with HTTP network access, allowing unauthorized access to critical data or complete access to all data accessible in PeopleTools.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, PsAdmin component, affecting versions 8.61-8.63. Difficult to exploit, requires access to the physical communication segment attached to the hardware running PeopleTools; an unauthenticated attacker can take over the system.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Analytic Server) affecting versions 8.61-8.63. A low-privileged attacker with logon to the infrastructure can unauthorizedly create, delete, or modify critical data, read a subset of data, and cause partial DOS.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Business Interlink component, affecting versions 8.61-8.63. Difficult to exploit, an unauthenticated attacker with HTTP network access can take over PeopleTools.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Business Interlink component, affecting versions 8.61-8.63. Difficult to exploit, a low-privileged attacker with HTTP network access can take over PeopleTools.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Change Assistant) affecting versions 8.61-8.63. A high-privileged attacker with network access via HTTP can unauthorizedly access critical or all data and cause partial DOS.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Business Interlink component, affecting versions 8.61-8.63. Difficult to exploit, an unauthenticated attacker with HTTP network access can take over PeopleTools.

Vulnerability in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, causing a hang or frequently repeatable crash (complete DoS).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Portal component, affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized access to critical data and partial denial of service (partial DOS).

Vulnerability in the Workflow component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.62). A low-privileged authenticated attacker over HTTP, with user interaction, can perform unauthorized update, insert or delete access and read a subset of data, with potential impact on additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Query) affecting versions 8.61 and 8.62. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, resulting in unauthorized read access to a subset of accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Performance Monitor). Affected versions are 8.60, 8.61, and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.5 (Availability impacts).