Known vulnerabilities in PeopleSoft Enterprise PeopleTools - page 5

Vendor: Oracle
Software: PeopleSoft Enterprise PeopleTools
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 346
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise PeopleTools is affected by 346 known vulnerabilities: 2 critical, 33 high, 222 medium, 89 low Critical High Medium Low

Vulnerabilities (346)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78432 - Improper input validation
CVE-2023-22014		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071995
#VU78433 - Improper input validation
CVE-2023-22047		 CWE-20 Medium
Available
No
 - 19.07.2023 SB2023071995
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 - 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU77102 - Stack-based buffer overflow
CVE-2022-45688		 CWE-121 Medium
No
No
 - 08.06.2023 SB2023060836
SB2023060927
SB2023071959
and 35 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 - 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU75295 - Improper input validation
CVE-2023-21916		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418187
#VU75296 - Improper input validation
CVE-2023-21981		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418187
#VU72036 - Error Handling
CVE-2023-23931		 CWE-388 Low
No
No
 - 08.02.2023 SB2023020813
SB2023030952
SB2023031419
and 68 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 - 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71398 - Insufficient Verification of Data Authenticity
CVE-2022-23491		 CWE-345 High
No
No
 - 20.01.2023 SB2023012034
SB2023012035
SB2023012036
and 51 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 - 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71108 - Out-of-bounds write
CVE-2022-45685		 CWE-787 Medium
No
No
 - 11.01.2023 SB2023011159
SB2023011160
SB2023030328
and 29 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 - 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 - 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 - 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU69392 - Resource exhaustion
CVE-2022-45061		 CWE-400 Medium
No
No
 - 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 - 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Available
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU54520 - Improper input validation
CVE-2020-14343		 CWE-20 High
Available
No
 - 04.07.2021 SB2021070403
SB2021070404
SB2022042259
and 17 more


Showing elements 81 - 100 out of 346