Oracle PeopleSoft Enterprise Pt PeopleTools vulnerabilities

15 CVEs affecting Oracle PeopleSoft Enterprise Pt PeopleTools, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-35289, published 2026-06-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10086, published 2019-08-20. High severity, CVSS 7.3. EPSS: 28.4% chance of exploitation in the next 30 days. In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all…
CVE-2017-18640, published 2019-12-12. High severity, CVSS 7.5. EPSS: 26.7% chance of exploitation in the next 30 days. The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
CVE-2019-12402, published 2019-08-30. High severity, CVSS 7.5. EPSS: 16.2% chance of exploitation in the next 30 days. The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service…
CVE-2020-13956, published 2020-12-02. Medium severity, CVSS 5.3. EPSS: 9% chance of exploitation in the next 30 days. Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host…
CVE-2021-2218, published 2021-04-22. High severity, CVSS 8.3. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Health Center). Supported versions that are affected are 8.56 and 8.57. Easily exploitable…
CVE-2021-2408, published 2021-07-21. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Notification Configuration). The supported version that is affected is 8.59. Easily exploitable…
CVE-2026-35278, published 2026-06-17. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.61 and 8.62. Easily exploitable…
CVE-2018-2793, published 2018-04-19. Medium severity, CVSS 6.2. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PsAdmin). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily…
CVE-2026-35289, published 2026-06-17. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit…
CVE-2026-35279, published 2026-06-17. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit…

Latest

CVE-2026-35288, published 2026-06-17. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package). Supported versions that are affected are 8.61 and 8.62. Easily exploitable…
CVE-2026-35276, published 2026-06-17. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Application Server). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit…
CVE-2026-35274, published 2026-06-17. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package). Supported versions that are affected are 8.61 and 8.62. Easily exploitable…
CVE-2026-35272, published 2026-06-17. High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package). Supported versions that are affected are 8.61 and 8.62. Easily exploitable…
CVE-2026-35271, published 2026-06-17. High severity, CVSS 8.7. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit…