Known vulnerabilities in PeopleSoft Enterprise PeopleTools - page 8

Vendor: Oracle
Software: PeopleSoft Enterprise PeopleTools
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 346
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise PeopleTools is affected by 346 known vulnerabilities: 2 critical, 33 high, 222 medium, 89 low Critical High Medium Low

Vulnerabilities (346)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60200 - Improper input validation
CVE-2022-21345		 CWE-20 Medium
No
No
 - 01.02.2022 SB2022020113
#VU60201 - Improper input validation
CVE-2022-21359		 CWE-20 Medium
No
No
 - 01.02.2022 SB2022020113
#VU60202 - Improper input validation
CVE-2022-21272		 CWE-20 Medium
No
No
 - 01.02.2022 SB2022020113
#VU60203 - Improper input validation
CVE-2022-21369		 CWE-20 Medium
No
No
 - 01.02.2022 SB2022020113
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 - 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 43 more
#VU57498 - Improper input validation
CVE-2021-22931		 CWE-20 High
No
No
 - 19.10.2021 SB2021101945
SB2022020113
SB2022031104
and 28 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946		 CWE-319 Medium
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 - 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU55859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-37695		 CWE-79 Low
No
No
 - 16.08.2021 SB2021081608
SB2022011822
SB2022020113
and 16 more
#VU55372 - Improper input validation
CVE-2021-27568		 CWE-20 High
No
No
 - 27.07.2021 SB2021072765
SB2021081922
SB2022011837
and 11 more
#VU55377 - Improper input validation
CVE-2021-2407		 CWE-20 Medium
No
No
 - 27.07.2021 SB2021072765
#VU55378 - Improper input validation
CVE-2021-2377		 CWE-20 Low
No
No
 - 27.07.2021 SB2021072765
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 - 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 59 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 - 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU51732 - Security Features
CVE-2021-3450		 CWE-254 Medium
No
No
 - 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU50955 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-22884		 CWE-350 Medium
No
No
 - 25.02.2021 SB2021022530
SB2021022532
SB2021022616
and 38 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU32872 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7017		 CWE-79 Low
No
No
 - 28.07.2020 SB2020072815
SB2021072122
SB2021072765
#VU24168 - Improper input validation
CVE-2019-17195		 CWE-20 Medium
No
No
 - 09.01.2020 SB2019101519
SB2020010921
SB2020040218
and 20 more


Showing elements 141 - 160 out of 346