Oracle PeopleSoft Enterprise Human Capital Management Human Resources vulnerabilities

11 CVEs affecting Oracle PeopleSoft Enterprise Human Capital Management Human Resources, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-21992, published 2023-04-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-0227, published 2019-05-01. High severity, CVSS 7.5. EPSS: 91.9% chance of exploitation in the next 30 days. A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x…
CVE-2018-8032, published 2018-08-02. Medium severity, CVSS 6.1. EPSS: 10.6% chance of exploitation in the next 30 days. Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
CVE-2016-0407, published 2016-04-21. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to…
CVE-2018-3068, published 2018-07-18. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products (subcomponent: Compensation). The supported version that is affected is 9.2. Easily exploitable…
CVE-2019-2951, published 2019-10-16. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: US Federal Specific). The supported version that is affected is 9.2. Easily exploitable…
CVE-2018-2654, published 2018-01-18. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products (subcomponent: Company Dir / Org Chart Viewer). The supported version that is affected is 9.2.…
CVE-2017-10304, published 2017-10-19. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows…
CVE-2017-10306, published 2017-10-19. Medium severity, CVSS 4.6. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows…
CVE-2018-2681, published 2018-01-18. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable…
CVE-2020-2561, published 2020-01-15. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer). The supported version that is affected is 9.2. Easily…

Latest

CVE-2023-21992, published 2023-04-18. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce). The supported version that is affected is 9.2. Easily exploitable…