Oracle PeopleSoft Enterprise vulnerabilities

75 CVEs affecting Oracle PeopleSoft Enterprise, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-21286, published 2024-10-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-22047, published 2023-07-18. High severity, CVSS 7.5. EPSS: 77% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability…
CVE-2005-3463, published 2005-11-02. High severity, CVSS 10.0. EPSS: 5.1% chance of exploitation in the next 30 days. Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE03.
CVE-2006-1886, published 2006-04-20. High severity, CVSS 10.0. EPSS: 4.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown impact and attack vectors, aka Vuln# PSE01.
CVE-2006-3722, published 2006-07-21. High severity, CVSS 10.0. EPSS: 4.1% chance of exploitation in the next 30 days. Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3 has unknown impact and attack vectors, aka Oracle…
CVE-2006-3723, published 2006-07-21. High severity, CVSS 10.0. EPSS: 4.1% chance of exploitation in the next 30 days. Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 and 8.9 Bundle #3 has unknown impact and attack vectors, aka…
CVE-2007-0297, published 2007-01-17. Medium severity, CVSS 4.0. EPSS: 3.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE03.
CVE-2005-3462, published 2005-11-02. High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE02.
CVE-2005-3464, published 2005-11-02. High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE04.
CVE-2007-5532, published 2007-10-17. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors,…
CVE-2007-2131, published 2007-04-18. High severity, CVSS 10.0. EPSS: 3% chance of exploitation in the next 30 days. Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectors, aka PSE01.

Latest

CVE-2024-21286, published 2024-10-15. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management product of Oracle PeopleSoft (component: Enterprise Learning Management). The supported version that is affected is…
CVE-2024-21283, published 2024-10-15. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for Core). Supported versions that are affected are 9.2.48-9.2.50. Easily…
CVE-2022-21639, published 2022-10-18. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search Integration). Supported versions that are affected are 8.59 and 8.60. Easily exploitable…
CVE-2022-21602, published 2022-10-18. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.58, 8.59 and 8.60. Easily exploitable vulnerability…
CVE-2022-21481, published 2022-04-19. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Financial Gateway). The supported version that is affected is 9.2. Easily exploitable…
CVE-2021-35541, published 2021-10-20. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise SCM product of Oracle PeopleSoft (component: Supplier Portal). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low…
CVE-2021-2151, published 2021-04-22. Medium severity, CVSS 6.7. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable…
CVE-2019-2519, published 2019-01-16. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). The supported version that is affected is 9.2. Easily…
CVE-2011-0856, published 2011-04-20. Medium severity, CVSS 4.0. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle PeopleSoft Enterprise 8.49 GA through 8.49.30, 8.50 GA through 8.50.17, and 8.51 GA through 8.51.07 allows remote authenticated users to affect confidentiality via…