Known vulnerabilities in PeopleSoft Enterprise PeopleTools - page 6

Vendor: Oracle
Software: PeopleSoft Enterprise PeopleTools
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 346
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise PeopleTools is affected by 346 known vulnerabilities: 2 critical, 33 high, 222 medium, 89 low Critical High Medium Low

Vulnerabilities (346)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71325 - Improper input validation
CVE-2023-21844		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011870
#VU71326 - Improper input validation
CVE-2023-21845		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011870
#VU69673 - Out-of-bounds write
CVE-2022-40149		 CWE-787 Medium
No
No
 - 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 41 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68508 - Improper input validation
CVE-2022-21639		 CWE-20 Medium
No
No
 - 19.10.2022 SB2022101973
#VU68509 - Improper input validation
CVE-2022-39407		 CWE-20 Low
No
No
 - 19.10.2022 SB2022101973
#VU68510 - Improper input validation
CVE-2022-21602		 CWE-20 Medium
No
No
 - 19.10.2022 SB2022101973
#VU67760 - Type conversion
CVE-2020-10735		 CWE-704 Medium
No
No
 - 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 - 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 - 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 - 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU65531 - Improper input validation
CVE-2022-21512		 CWE-20 Low
No
No
 - 20.07.2022 SB2022072056
#VU65530 - Improper input validation
CVE-2022-21521		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072056
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 - 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 - 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU64034 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3918		 CWE-94 High
No
No
 - 07.06.2022 SB2021111302
SB2022060836
SB2022071504
and 45 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782		 CWE-303 Medium
No
No
 - 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 - 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182		 CWE-79 Medium
No
No
 - 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU54639 - Resource exhaustion
CVE-2021-22144		 CWE-400 Medium
No
No
 - 09.07.2021 SB2021070907
SB2022092102
SB2022101973
and 2 more


Showing elements 101 - 120 out of 346