Known vulnerabilities in PeopleSoft Enterprise PeopleTools - page 12

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Total vulnerabilities: 346
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise PeopleTools is affected by 346 known vulnerabilities: 2 critical, 33 high, 222 medium, 89 low Critical High Medium Low

Vulnerabilities (346)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU35664 - Exposure of sensitive information to an unauthorized actor
CVE-2019-2599
CWE-200 Medium
No
No
- 24.07.2019 SB2018101724
SB20190716136
#VU35665 - Improper Access Control
CVE-2019-2748
CWE-284 Medium
No
No
- 24.07.2019 SB2018101724
SB20190716136
#VU35670 - Improper Access Control
CVE-2019-2772
CWE-284 Medium
No
No
- 24.07.2019 SB2018101724
SB20190716135
#VU109782 - Improper input validation
CVE-2015-0226
CWE-20 Medium
No
No
- 16.07.2019 SB20190716135
#VU35957 - Improper Access Control
CVE-2019-2573
CWE-284 Low
No
No
- 23.04.2019 SB2018101724
#VU35959 - Exposure of sensitive information to an unauthorized actor
CVE-2019-2586
CWE-200 Low
No
No
- 23.04.2019 SB2018101724
#VU35960 - Improper Access Control
CVE-2019-2594
CWE-284 Medium
No
No
- 23.04.2019 SB2018101724
#VU35961 - Improper Access Control
CVE-2019-2597
CWE-284 Medium
No
No
- 23.04.2019 SB2018101724
#VU35962 - Improper Access Control
CVE-2019-2598
CWE-284 High
No
No
- 23.04.2019 SB2018101724
#VU35969 - Improper Access Control
CVE-2019-2637
CWE-284 Medium
No
No
- 23.04.2019 SB2018101724
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559
CWE-327 Low
No
No
- 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU36193 - Exposure of sensitive information to an unauthorized actor
CVE-2019-2404
CWE-200 Medium
No
No
- 16.01.2019 SB2018101724
SB2019011548
#VU36194 - Improper Access Control
CVE-2019-2405
CWE-284 Medium
No
No
- 16.01.2019 SB2018101724
SB2019011548
#VU36195 - Improper Access Control
CVE-2019-2408
CWE-284 Low
No
No
- 16.01.2019 SB2018101724
SB2019011548
#VU36196 - Improper Access Control
CVE-2019-2416
CWE-284 High
No
No
- 16.01.2019 SB2018101724
SB2019011548
#VU36197 - Improper Access Control
CVE-2019-2417
CWE-284 Medium
No
No
- 16.01.2019 SB2018101724
SB2019011548
#VU31182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17960
CWE-79 Low
No
No
- 14.11.2018 SB2018111420
SB2021040136
SB2018042442
and 6 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251
CWE-79 Low
No
No
- 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU13325 - Improper input validation
CVE-2018-0732
CWE-20 Low
No
No
- 12.06.2018 SB2018061305
SB2018070906
SB2018073005
and 54 more
#VU12799 - Heap-based Buffer Overflow
CVE-2018-1000300
CWE-122 High
No
No
- 17.05.2018 SB2018051707
SB2018051809
SB2018051810
and 12 more


Showing elements 221 - 240 out of 346