Known vulnerabilities in PeopleSoft Enterprise PeopleTools

Vendor: Oracle
Software: PeopleSoft Enterprise PeopleTools
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 346
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise PeopleTools is affected by 346 known vulnerabilities: 2 critical, 33 high, 222 medium, 89 low Critical High Medium Low

Vulnerabilities (346)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134383 - Improper input validation
CVE-2026-35273		 CWE-20 Critical
No
Exploited
 - 12.06.2026 SB2026061201
#VU126795 - Out-of-bounds read
CVE-2026-34309		 CWE-125 High
No
No
 - 22.04.2026 SB20260422116
#VU126796 - Out-of-bounds read
CVE-2026-34277		 CWE-125 Medium
No
No
 - 22.04.2026 SB20260422116
#VU126804 - Out-of-bounds read
CVE-2026-34269		 CWE-125 Medium
No
No
 - 22.04.2026 SB20260422116
#VU126808 - Out-of-bounds read
CVE-2026-34307		 CWE-125 Medium
No
No
 - 22.04.2026 SB20260422116
#VU122076 - Stack-based buffer overflow
CVE-2025-15467		 CWE-121 High
Available
No
 - 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 66 more
#VU121745 - Improper input validation
CVE-2026-21951		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120185
#VU121746 - Improper input validation
CVE-2026-21938		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120185
#VU121747 - Improper input validation
CVE-2026-21934		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120185
#VU121717 - Improper input validation
CVE-2025-43967		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120116
SB20260120160
SB20260422116
#VU121025 - Unsynchronized Access to Shared Data in a Multithreaded Context
CVE-2025-14017		 CWE-567 Low
No
No
 - 07.01.2026 SB2026010741
SB2026010915
SB2026010935
and 12 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 101 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU116213 - Out-of-bounds write
CVE-2025-9230		 CWE-787 Medium
No
No
 - 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU115138 - Out-of-bounds read
CVE-2025-9086		 CWE-125 Low
No
No
 - 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 44 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194		 CWE-835 Medium
No
No
 - 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 - 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU113118 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27210		 CWE-22 Low
Available
No
 - 22.07.2025 SB2025072233
SB2025082103
SB2025091525
and 6 more


Showing elements 1 - 20 out of 346