CVE-2016-5472
HighSummary
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity, and availability via vectors related to Install and Packaging.
Risk Assessment
This vulnerability may lead to breaches of data confidentiality and integrity, posing a risk to the organization's information security.
Recommendation
It is recommended to update to the latest version of Oracle PeopleSoft products and conduct a security audit to minimize risk.
Other vulnerabilities in PeopleSoft Enterprise PeopleTools
See all- CVE-2017-10364High
Vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise allows low privileged attackers to access critical data. Versions 8.54, 8.55, and 8.56 are susceptible to easily exploitable attacks via HTTP.
- CVE-2017-3519High
A vulnerability in the PeopleTools component of Oracle PeopleSoft Products allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in PeopleSoft Enterprise PeopleTools.
- CVE-2016-8291High
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.
- CVE-2016-5465High
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Panel Processor.
- CVE-2026-60821Critical
Vulnerability in PeopleSoft Enterprise PeopleTools (Business Interlink component) versions 8.61-8.63. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.
- CVE-2026-35273CriticalActively exploited
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Management). Affects versions 8.61 and 8.62. Easily exploitable, allows an unauthenticated attacker via HTTP to take over PeopleSoft Enterprise PeopleTools.
- CVE-2026-60975High
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Security) versions 8.61 and 8.62. Difficult to exploit, requires logon to infrastructure, allows unauthorized access and data modification, with potential impact on other products.
- CVE-2026-60967High
Vulnerability in PeopleSoft Enterprise PeopleTools (component: nVision) versions 8.61-8.63. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to fully compromise the system.
- CVE-2026-60902High
Vulnerability in Oracle's PeopleSoft Enterprise PeopleTools product (component: Tuxedo) affects versions 8.61-8.63. It is difficult to exploit but allows a low-privileged attacker with local access to take over the system. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.
- CVE-2026-60884Medium
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Panel Processor) affects versions 8.61-8.63. It is difficult to exploit, requires low privileges, HTTP access, and user interaction, allowing unauthorized update, insert, or delete access and read access to a subset of data. Attacks may impact additional products.
Original NVD description (English source)
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity, and availability via vectors related to Install and Packaging.