Known vulnerabilities in PeopleSoft Enterprise PeopleTools - page 17

Vendor: Oracle
Software: PeopleSoft Enterprise PeopleTools
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 346
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise PeopleTools is affected by 346 known vulnerabilities: 2 critical, 33 high, 222 medium, 89 low Critical High Medium Low

Vulnerabilities (346)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU38552 - Improper input validation
CVE-2017-10061		 CWE-20 High
No
No
 - 08.08.2017 SB2017012818
#VU38555 - Improper input validation
CVE-2017-10015		 CWE-20 Low
No
No
 - 08.08.2017 SB2017012818
#VU38556 - Improper input validation
CVE-2017-10017		 CWE-20 Medium
No
No
 - 08.08.2017 SB2017012818
#VU38557 - Improper input validation
CVE-2017-10019		 CWE-20 Medium
No
No
 - 08.08.2017 SB2017012818
#VU38558 - Improper input validation
CVE-2017-10020		 CWE-20 Low
No
No
 - 08.08.2017 SB2017012818
#VU38559 - Improper input validation
CVE-2017-10021		 CWE-20 Medium
No
No
 - 08.08.2017 SB2017012818
#VU38560 - Improper input validation
CVE-2017-10027		 CWE-20 Medium
No
No
 - 08.08.2017 SB2017012818
#VU39112 - Server-Side Request Forgery (SSRF)
CVE-2017-3546		 CWE-918 Medium
Available
No
 - 24.04.2017 SB2017012818
#VU39113 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-3548		 CWE-611 Medium
Available
No
 - 24.04.2017 SB2017012818
#VU39121 - Improper input validation
CVE-2017-3519		 CWE-20 Medium
No
No
 - 24.04.2017 SB2017012818
#VU39122 - Improper input validation
CVE-2017-3520		 CWE-20 Medium
No
No
 - 24.04.2017 SB2017012818
#VU39125 - Exposure of sensitive information to an unauthorized actor
CVE-2017-3527		 CWE-200 Medium
No
No
 - 24.04.2017 SB2017012818
#VU39126 - Improper input validation
CVE-2017-3536		 CWE-20 Medium
No
No
 - 24.04.2017 SB2017012818
#VU39772 - Improper input validation
CVE-2017-3298		 CWE-20 Medium
No
No
 - 28.01.2017 SB2017012818
#VU39773 - Improper input validation
CVE-2017-3299		 CWE-20 Medium
No
No
 - 28.01.2017 SB2017012818
#VU39774 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3300		 CWE-79 Low
No
No
 - 28.01.2017 SB2017012818
#VU39788 - Exposure of sensitive information to an unauthorized actor
CVE-2017-3292		 CWE-200 Medium
No
No
 - 28.01.2017 SB2017012818
#VU39790 - Security Features
CVE-2016-8329		 CWE-254 Medium
No
No
 - 28.01.2017 SB2017012818
#VU642 - Buffer over-read
CVE-2016-2176		 CWE-126 Low
No
No
 - 23.09.2016 SB2016050507
SB2016091934
SB2016050404
and 2 more
#VU641 - Improper input validation
CVE-2016-2109		 CWE-119 Low
No
No
 - 23.09.2016 SB2016050506
SB2016051903
SB2016051204
and 17 more


Showing elements 321 - 340 out of 346