Known vulnerabilities in PeopleSoft Enterprise PeopleTools

Vendor: Oracle
Software: PeopleSoft Enterprise PeopleTools
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 346
Public exploits: 24
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise PeopleTools is affected by 346 known vulnerabilities: 2 critical, 33 high, 222 medium, 89 low Critical High Medium Low

Vulnerabilities (346)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134383 - Improper input validation
CVE-2026-35273		 CWE-20 Critical
No
Exploited
 - 12.06.2026 SB2026061201
#VU126795 - Out-of-bounds read
CVE-2026-34309		 CWE-125 High
No
No
 - 22.04.2026 SB20260422116
#VU126796 - Out-of-bounds read
CVE-2026-34277		 CWE-125 Medium
No
No
 - 22.04.2026 SB20260422116
#VU126804 - Out-of-bounds read
CVE-2026-34269		 CWE-125 Medium
No
No
 - 22.04.2026 SB20260422116
#VU126808 - Out-of-bounds read
CVE-2026-34307		 CWE-125 Medium
No
No
 - 22.04.2026 SB20260422116
#VU122076 - Stack-based buffer overflow
CVE-2025-15467		 CWE-121 High
Available
No
 - 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 67 more
#VU121717 - Improper input validation
CVE-2025-43967		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120116
SB20260120160
SB20260422116
#VU121025 - Unsynchronized Access to Shared Data in a Multithreaded Context
CVE-2025-14017		 CWE-567 Low
No
No
 - 07.01.2026 SB2026010741
SB2026010915
SB2026010935
and 15 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 102 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 94 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194		 CWE-835 Medium
No
No
 - 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU36193 - Exposure of sensitive information to an unauthorized actor
CVE-2019-2404		 CWE-200 Medium
No
No
 - 16.01.2019 SB2018101724
SB2019011548
#VU36195 - Improper Access Control
CVE-2019-2408		 CWE-284 Low
No
No
 - 16.01.2019 SB2018101724
SB2019011548
#VU36198 - Improper Access Control
CVE-2019-2423		 CWE-284 Medium
No
No
 - 16.01.2019 SB2018101724
SB2019011548
#VU36201 - Improper Access Control
CVE-2019-2439		 CWE-284 Medium
No
No
 - 16.01.2019 SB2018101724
SB2019011548
#VU36202 - Improper Access Control
CVE-2019-2442		 CWE-284 Medium
No
No
 - 16.01.2019 SB2018101724
SB2019011548
#VU36218 - Improper Access Control
CVE-2019-2471		 CWE-284 Medium
No
No
 - 16.01.2019 SB2018101724
SB2019011548
#VU36228 - Improper Access Control
CVE-2019-2490		 CWE-284 Medium
No
No
 - 16.01.2019 SB2018101724
SB2019011548
#VU36229 - Improper Access Control
CVE-2019-2499		 CWE-284 Medium
No
No
 - 16.01.2019 SB2018101724
SB2019011548
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 - 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more


Showing elements 1 - 20 out of 346