Known vulnerabilities in PeopleSoft Enterprise PeopleTools 8.57

Vendor: Oracle
Software: PeopleSoft Enterprise PeopleTools
Version: 8.57
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 109
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools version 8.57 PeopleSoft Enterprise PeopleTools 8.57 is affected by 109 vulnerabilities: 1 critical, 10 high, 73 medium, 25 low Critical High Medium Low

Vulnerabilities (109)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60201 - Improper input validation
CVE-2022-21359		 CWE-20 Medium
No
No
 - 01.02.2022 SB2022020113
#VU60202 - Improper input validation
CVE-2022-21272		 CWE-20 Medium
No
No
 - 01.02.2022 SB2022020113
#VU60203 - Improper input validation
CVE-2022-21369		 CWE-20 Medium
No
No
 - 01.02.2022 SB2022020113
#VU60204 - Improper input validation
CVE-2022-21364		 CWE-20 Medium
No
No
 - 01.02.2022 SB2022020113
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 - 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 44 more
#VU57498 - Improper input validation
CVE-2021-22931		 CWE-20 High
No
No
 - 19.10.2021 SB2021101945
SB2022020113
SB2022031104
and 28 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946		 CWE-319 Medium
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 - 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU55859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-37695		 CWE-79 Low
No
No
 - 16.08.2021 SB2021081608
SB2022011822
SB2022020113
and 16 more
#VU55377 - Improper input validation
CVE-2021-2407		 CWE-20 Medium
No
No
 - 27.07.2021 SB2021072765
#VU55378 - Improper input validation
CVE-2021-2377		 CWE-20 Low
No
No
 - 27.07.2021 SB2021072765
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU52582 - Improper input validation
CVE-2021-2151		 CWE-20 Medium
No
No
 - 26.04.2021 SB2021042615
#VU52583 - Improper input validation
CVE-2021-2216		 CWE-20 Medium
No
No
 - 26.04.2021 SB2021042615
#VU52581 - Improper input validation
CVE-2017-1000061		 CWE-20 Low
No
No
 - 26.04.2021 SB2021042615
SB2022101332
SB2017082112
and 1 more
#VU52500 - Improper input validation
CVE-2020-27193		 CWE-20 Medium
No
No
 - 23.04.2021 SB2021042301
SB2021042522
SB2021042615
and 4 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 - 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 43 more
#VU51732 - Security Features
CVE-2021-3450		 CWE-254 Medium
No
No
 - 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Public exploit available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more


Showing elements 1 - 20 out of 109