CVE-2003-0628: PeopleSoft PeopleTools

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value.

Affected products

• PeopleSoft PeopleTools: version 8.4 only; version 8.10 only; version 8.11 only; version 8.12 only; version 8.13 only; version 8.14 only; …

Published 2003-12-15. Last modified 2026-06-16.