Known vulnerabilities in PeopleSoft Enterprise PeopleTools - page 2

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Total vulnerabilities: 346
Public exploits: 24
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise PeopleTools is affected by 346 known vulnerabilities: 2 critical, 33 high, 222 medium, 89 low Critical High Medium Low

Vulnerabilities (346)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121745 - Improper input validation
CVE-2026-21951
CWE-20 Medium
No
No
- 20.01.2026 SB20260120185
#VU121746 - Improper input validation
CVE-2026-21938
CWE-20 Medium
No
No
- 20.01.2026 SB20260120185
#VU121747 - Improper input validation
CVE-2026-21934
CWE-20 Medium
No
No
- 20.01.2026 SB20260120185
#VU117508 - Improper input validation
CVE-2025-53059
CWE-20 Medium
No
No
- 22.10.2025 SB20251022138
#VU117509 - Improper input validation
CVE-2025-61750
CWE-20 Low
No
No
- 22.10.2025 SB20251022138
#VU116213 - Out-of-bounds write
CVE-2025-9230
CWE-787 Medium
No
No
- 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU115138 - Out-of-bounds read
CVE-2025-9086
CWE-125 Low
No
No
- 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 44 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988
CWE-611 Medium
Available
Exploited
- 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 33 more
#VU114026 - Resource exhaustion
CVE-2025-55163
CWE-400 Medium
No
No
- 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924
CWE-674 Medium
No
No
- 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU113156 - Memory corruption
CVE-2025-6965
CWE-119 Medium
No
No
- 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU113118 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27210
CWE-22 Low
Available
No
- 22.07.2025 SB2025072233
SB2025082103
SB2025091525
and 6 more
#VU112257 - Improper input validation
CVE-2025-31672
CWE-20 Medium
No
No
- 04.07.2025 SB20250704104
SB2025070708
SB2025071664
and 23 more
#VU36194 - Improper Access Control
CVE-2019-2405
CWE-284 Medium
No
No
- 16.01.2019 SB2018101724
SB2019011548
#VU36196 - Improper Access Control
CVE-2019-2416
CWE-284 High
No
No
- 16.01.2019 SB2018101724
SB2019011548
#VU36197 - Improper Access Control
CVE-2019-2417
CWE-284 Medium
No
No
- 16.01.2019 SB2018101724
SB2019011548
#VU36200 - Improper Access Control
CVE-2019-2433
CWE-284 Medium
No
No
- 16.01.2019 SB2018101724
SB2019011548
#VU36203 - Improper Access Control
CVE-2019-2443
CWE-284 Medium
No
No
- 16.01.2019 SB2018101724
SB2019011548
#VU13325 - Improper input validation
CVE-2018-0732
CWE-20 Low
No
No
- 12.06.2018 SB2018061305
SB2018070906
SB2018073005
and 54 more
#VU12799 - Heap-based Buffer Overflow
CVE-2018-1000300
CWE-122 High
No
No
- 17.05.2018 SB2018051707
SB2018051809
SB2018051810
and 12 more


Showing elements 21 - 40 out of 346