Known vulnerabilities in PeopleSoft Enterprise PeopleTools - page 12

Vendor: Oracle
Software: PeopleSoft Enterprise PeopleTools
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 346
Public exploits: 24
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise PeopleTools is affected by 346 known vulnerabilities: 2 critical, 33 high, 222 medium, 89 low Critical High Medium Low

Vulnerabilities (346)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU36501 - Improper input validation
CVE-2018-3132		 CWE-20 Medium
No
No
 - 17.10.2018 SB2017101944
#VU36502 - Improper input validation
CVE-2018-3135		 CWE-20 Medium
No
No
 - 17.10.2018 SB2017101944
#VU36506 - Improper input validation
CVE-2018-3154		 CWE-20 Medium
No
No
 - 17.10.2018 SB2017101944
#VU36507 - Improper input validation
CVE-2018-3164		 CWE-20 Medium
No
No
 - 17.10.2018 SB2017101944
#VU36508 - Improper input validation
CVE-2018-3165		 CWE-20 Medium
No
No
 - 17.10.2018 SB2017101944
#VU38030 - Exposure of sensitive information to an unauthorized actor
CVE-2017-10422		 CWE-200 Medium
No
No
 - 19.10.2017 SB2017101945
#VU38558 - Improper input validation
CVE-2017-10020		 CWE-20 Low
No
No
 - 08.08.2017 SB2017012818
#VU38559 - Improper input validation
CVE-2017-10021		 CWE-20 Medium
No
No
 - 08.08.2017 SB2017012818
#VU38560 - Improper input validation
CVE-2017-10027		 CWE-20 Medium
No
No
 - 08.08.2017 SB2017012818
#VU39112 - Server-Side Request Forgery (SSRF)
CVE-2017-3546		 CWE-918 Medium
Available
No
 - 24.04.2017 SB2017012818
#VU39113 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-3548		 CWE-611 Medium
Available
No
 - 24.04.2017 SB2017012818
#VU39121 - Improper input validation
CVE-2017-3519		 CWE-20 Medium
No
No
 - 24.04.2017 SB2017012818
#VU39122 - Improper input validation
CVE-2017-3520		 CWE-20 Medium
No
No
 - 24.04.2017 SB2017012818
#VU39125 - Exposure of sensitive information to an unauthorized actor
CVE-2017-3527		 CWE-200 Medium
No
No
 - 24.04.2017 SB2017012818
#VU39126 - Improper input validation
CVE-2017-3536		 CWE-20 Medium
No
No
 - 24.04.2017 SB2017012818
#VU39772 - Improper input validation
CVE-2017-3298		 CWE-20 Medium
No
No
 - 28.01.2017 SB2017012818
#VU39773 - Improper input validation
CVE-2017-3299		 CWE-20 Medium
No
No
 - 28.01.2017 SB2017012818
#VU39774 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3300		 CWE-79 Low
No
No
 - 28.01.2017 SB2017012818
#VU39788 - Exposure of sensitive information to an unauthorized actor
CVE-2017-3292		 CWE-200 Medium
No
No
 - 28.01.2017 SB2017012818
#VU39790 - Security Features
CVE-2016-8329		 CWE-254 Medium
No
No
 - 28.01.2017 SB2017012818


Showing elements 221 - 240 out of 346