PeopleSoft Enterprise PeopleTools vulnerabilities

Vulnerability in PeopleSoft Enterprise PeopleTools (component Tuxedo) affecting versions 8.61-8.63. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP allows unauthorized read access to a subset of data.

Vulnerability in PeopleSoft Enterprise PeopleTools (component Porting) affecting versions 8.61-8.63. A difficult-to-exploit attack by an unauthenticated attacker logged into the infrastructure allows unauthorized update, insert, or delete access to data.

Vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise allows low privileged attackers to access critical data. Versions 8.54, 8.55, and 8.56 are susceptible to easily exploitable attacks via HTTP.

A vulnerability in the PeopleTools component of Oracle PeopleSoft Products allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in PeopleSoft Enterprise PeopleTools.

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity, and availability via vectors related to Install and Packaging.

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Panel Processor.

Vulnerability in PeopleSoft Enterprise PeopleTools (Business Interlink component) versions 8.61-8.63. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.

Vulnerability in PeopleSoft Enterprise PeopleTools (Report Distribution component) affecting versions 8.61–8.63. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data or all data accessible in PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (Porting component) affecting versions 8.61 and 8.62. A high-privileged attacker with logon to the infrastructure hosting PeopleTools can easily perform unauthorized creation, deletion or modification of data and access critical data.

Vulnerability in the Updates Environment Mgmt component of PeopleSoft Enterprise PeopleTools (Oracle PeopleSoft) affecting versions 8.61-8.63. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on some PeopleTools accessible data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component QAS) versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can perform unauthorized updates, inserts, or deletes and cause a partial denial of service (partial DoS).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Notification Configuration component) affecting versions 8.61-8.63. A difficult-to-exploit HTTP attack by a low-privileged attacker may impact additional products and allows unauthorized modification and read of some data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt) affecting versions 8.61-8.63. A difficult-to-exploit flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 2.5.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Report Distribution) affecting versions 8.61-8.63. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.7.

Vulnerability in the Report Distribution component of PeopleSoft Enterprise PeopleTools versions 8.61-8.63. A difficult-to-exploit HTTP attack requiring user interaction can lead to unauthorized access to critical data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Report Distribution) affecting versions 8.61-8.63. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 2.7.

Vulnerability in the Report Distribution component of PeopleSoft Enterprise PeopleTools versions 8.61-8.63. A difficult-to-exploit HTTP attack can lead to unauthorized access to critical data, and due to scope change may impact additional products.

Vulnerability in the nVision component of PeopleSoft Enterprise PeopleTools versions 8.61-8.63. An easily exploitable HTTP attack allows a low-privileged attacker to gain unauthorized access to critical data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: XML Publisher) affecting versions 8.61-8.63. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.3.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Porting) affects versions 8.61-8.63. An unauthenticated attacker with logon to the infrastructure, requiring user interaction, can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: LDAP) affects versions 8.61-8.63. A low privileged attacker with logon to the infrastructure can perform unauthorized update, insert or delete access and read a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. A low privileged attacker with logon to the infrastructure, under difficult exploit conditions, can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. A high privileged attacker with logon to the infrastructure, requiring user interaction, can take over PeopleSoft Enterprise PeopleTools.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt) affects versions 8.61-8.63. A high privileged attacker with logon to the infrastructure can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Business Interlink) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, requiring user interaction, can perform unauthorized update, insert or delete access and read a subset of data, with potential impact on additional products (scope change).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: LDAP) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can perform unauthorized update, insert or delete access and read a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, under difficult exploit conditions, can perform unauthorized update, insert or delete access and read a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, under difficult exploit conditions, can gain access to critical data or all accessible data and perform unauthorized update, insert or delete access.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affecting versions 8.61-8.63. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data. CVSS 3.1 Base Score 3.7.

Vulnerability in PeopleSoft Enterprise PeopleTools (Multichannel Framework component) affecting versions 8.61-8.63. A high-privileged attacker with network access via HTTP can take over the product.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Portal) affects versions 8.61-8.63. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP, requiring user interaction, to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, with potential impact on additional products.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Integration Broker. Affects versions 8.61-8.63. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, requiring user interaction and potentially impacting other products.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Updates Environment Mgmt. Affects versions 8.61-8.63. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure to compromise the system.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Push Notifications. Affects versions 8.61 and 8.62. An easily exploitable flaw allows a high-privileged attacker with access to the physical communication segment to compromise the system.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Search Framework. Affects versions 8.61 and 8.62. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to compromise the system.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Meta Data. Affects versions 8.61-8.63. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to compromise the system.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Process Scheduler, affecting versions 8.61 and 8.62. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to compromise the system, requiring user interaction and potentially impacting additional products (scope change). Successful attacks can result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Search Framework, affecting version 8.62. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to compromise the system, requiring user interaction. Successful attacks can result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Portal, affecting versions 8.61 and 8.62. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to compromise the system. Successful attacks can result in unauthorized read access to a subset of data and partial denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Application Data Sets, affecting versions 8.61-8.63. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to compromise the system. Successful attacks can result in unauthorized creation, deletion, or modification of critical data and complete denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Query, affecting versions 8.61 and 8.62. A difficult-to-exploit flaw allows a high-privileged attacker with HTTP network access to compromise the system. Successful attacks can result in unauthorized hang or frequently repeatable crash (complete DOS) and unauthorized update, insert, or delete access to some data and read access to a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Weblogic, affecting versions 8.61-8.63. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running PeopleTools to compromise the system. Successful attacks can result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Application Server - JRE, affecting versions 8.61-8.63. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure where PeopleTools executes to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Weblogic, affecting versions 8.61-8.63. A difficult-to-exploit flaw allows an unauthenticated attacker with TLS network access to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data and unauthorized update, insert, or delete access to some data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Web Server, affecting versions 8.61-8.63. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to compromise the system, potentially impacting additional products (scope change). Successful attacks can result in unauthorized read access to a subset of data.

Vulnerability in PeopleSoft Enterprise PeopleTools (component SQR) affecting versions 8.61-8.63. A difficult-to-exploit attack by a low-privileged user logged into the infrastructure allows unauthorized read access to a subset of data.

Vulnerability in PeopleSoft Enterprise PeopleTools (component Analytic Server) affecting versions 8.61-8.63. A difficult-to-exploit attack by a low-privileged user with network access via HTTP allows a partial denial of service.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Integration Broker) affecting versions 8.61-8.63. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to create, delete or modify data, and the attack may significantly impact additional products (scope change).