CVE-2003-0950: PeopleSoft PeopleTools

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.

Affected products

• PeopleSoft PeopleTools: version 8.4 only; version 8.10 only; version 8.11 only; version 8.12 only; version 8.13 only; version 8.14 only; …

Published 2003-12-15. Last modified 2026-06-16.