Known vulnerabilities in PeopleSoft Enterprise PeopleTools - page 7

Vendor: Oracle
Software: PeopleSoft Enterprise PeopleTools
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 346
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise PeopleTools is affected by 346 known vulnerabilities: 2 critical, 33 high, 222 medium, 89 low Critical High Medium Low

Vulnerabilities (346)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65528 - Improper input validation
CVE-2022-21543		 CWE-20 High
No
No
 - 20.07.2022 SB2022072056
#VU65529 - Improper input validation
CVE-2022-21520		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072056
#VU65499 - Improper input validation
CVE-2021-31684		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU62559 - Improper input validation
CVE-2022-21458		 CWE-20 Medium
No
No
 - 25.04.2022 SB2022042517
#VU62560 - Improper input validation
CVE-2022-21470		 CWE-20 Medium
No
No
 - 25.04.2022 SB2022042517
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 - 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 - 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61427 - Incorrect Regular Expression
CVE-2022-24729		 CWE-185 Low
No
No
 - 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 24 more
#VU60204 - Improper input validation
CVE-2022-21364		 CWE-20 Medium
No
No
 - 01.02.2022 SB2022020113
#VU60166 - Cryptographic Issues
CVE-2021-4160		 CWE-310 Low
No
No
 - 28.01.2022 SB2022012811
SB2022031611
SB2022042517
and 29 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59550 - Improper Certificate Validation
CVE-2021-44533		 CWE-295 Medium
No
No
 - 12.01.2022 SB2022011216
SB2022041522
SB2022042517
and 36 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU58219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41165		 CWE-79 Medium
No
No
 - 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 14 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714		 CWE-835 Medium
No
No
 - 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more
#VU54225 - Use After Free
CVE-2021-3518		 CWE-416 High
No
No
 - 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 40 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU28228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7656		 CWE-79 Medium
No
No
 - 25.05.2020 SB2020052520
SB2020100907
SB2022072056
and 14 more


Showing elements 121 - 140 out of 346