PeopleSoft Enterprise PeopleTools vulnerabilities

Vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise allows low privileged attackers to access critical data. Versions 8.54, 8.55, and 8.56 are susceptible to easily exploitable attacks via HTTP.

A vulnerability in the PeopleTools component of Oracle PeopleSoft Products allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in PeopleSoft Enterprise PeopleTools.

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity, and availability via vectors related to Install and Packaging.

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Panel Processor.

Vulnerability in PeopleSoft Enterprise PeopleTools (Business Interlink component) versions 8.61-8.63. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Security) versions 8.61 and 8.62. Difficult to exploit, requires logon to infrastructure, allows unauthorized access and data modification, with potential impact on other products.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: nVision) versions 8.61-8.63. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to fully compromise the system.

Vulnerability in Oracle's PeopleSoft Enterprise PeopleTools product (component: Tuxedo) affects versions 8.61-8.63. It is difficult to exploit but allows a low-privileged attacker with local access to take over the system. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Panel Processor) affects versions 8.61-8.63. It is difficult to exploit, requires low privileges, HTTP access, and user interaction, allowing unauthorized update, insert, or delete access and read access to a subset of data. Attacks may impact additional products.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: PeopleCode) affects versions 8.61-8.63. It is easily exploitable by a high-privileged attacker remotely via HTTP. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Configuration Manager) affects versions 8.61-8.63. It is easily exploitable by a low-privileged attacker remotely via SQL. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Data Mover) affects versions 8.61-8.63. It is difficult to exploit, requires high privileges, local access, and user interaction. Successful attacks can result in unauthorized creation, deletion, or modification of data, as well as partial denial of service.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Install and Packaging) affects versions 8.61-8.63. It is difficult to exploit by an unauthenticated attacker remotely via HTTP. Successful attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to critical data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Integration Broker). Affects versions 8.61-8.63. Difficult to exploit, allows unauthenticated attacker via HTTP to take over PeopleTools. Successful attack results in full system takeover.

Vulnerability in PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Affects versions 8.61-8.63. Difficult to exploit, allows unauthenticated attacker via HTTP to take over PeopleSoft Enterprise PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Panel Processor). Affects versions 8.61 and 8.62. Easily exploitable by an unauthenticated attacker with network access via HTTP, but requires user interaction. Successful attack allows unauthorized modification and read access to data.

Vulnerability in PeopleSoft Enterprise PeopleTools (Security component) allows a low-privileged attacker via HTTP to gain unauthorized read and modify access to data. Requires user interaction.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component PIA Core Technology. Affects versions 8.61 and 8.62. Allows a high-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all PeopleTools data.

Vulnerability in PeopleSoft Enterprise PeopleTools (Security component) allows a low-privileged attacker via HTTP to gain unauthorized read and modify access to data. Requires user interaction.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: OpenSearch Dashboards). An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized access to critical data, affecting other products.

Vulnerability in PeopleSoft Enterprise PeopleTools (Panel Processor component) allows a low-privileged attacker via HTTP to gain unauthorized read and modify access to data. Requires user interaction.

Vulnerability in PeopleSoft Enterprise PeopleTools (Process Scheduler component) allows a low-privileged authenticated attacker to modify and read critical data in other products (scope change). User interaction is required.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) version 8.62. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, but user interaction is required. The attack may impact additional products (scope change) and lead to unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.