Oracle PeopleSoft Enterprise Human Capital Management Candidate Gateway vulnerabilities

4 CVEs affecting Oracle PeopleSoft Enterprise Human Capital Management Candidate Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-14612, published 2020-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-2954, published 2020-04-15. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft (component: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows…
CVE-2016-8285, published 2016-10-25. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote administrators to affect confidentiality and integrity via vectors related to…
CVE-2019-2591, published 2019-04-23. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable…
CVE-2020-14612, published 2020-07-15. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft (component: Time and Labor). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low…