PeopleSoft Enterprise PeopleTools vulnerabilities

Vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise allows low privileged attackers to access critical data. Versions 8.54, 8.55, and 8.56 are susceptible to easily exploitable attacks via HTTP.

A vulnerability in the PeopleTools component of Oracle PeopleSoft Products allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in PeopleSoft Enterprise PeopleTools.

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity, and availability via vectors related to Install and Packaging.

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Panel Processor.

Vulnerability in PeopleSoft Enterprise PeopleTools (Business Interlink component) versions 8.61-8.63. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Integration Broker) affecting versions 8.61-8.63. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to create, delete or modify data, and the attack may significantly impact additional products (scope change).

Vulnerability in PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker via HTTP network access. Can lead to unauthorized access to critical data and complete denial of service.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker with logon to infrastructure. Successful attack can lead to takeover of PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Report Distribution) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker via HTTP network access. Successful attack can lead to takeover of PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. It is difficult to exploit, requires high privileges and user interaction. Successful attack can lead to takeover of PeopleTools and impact other products.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Cube Manager) affects versions 8.61-8.63. It is difficult to exploit, requires low privileges and logon to infrastructure. Successful attack can lead to takeover of PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Cube Manager) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker via HTTP network access. Can lead to unauthorized modification of data and complete denial of service.

Vulnerability in PeopleSoft Enterprise PeopleTools (Business Interlink component) affecting versions 8.61-8.63. A low-privileged attacker with network access via HTTP can easily exploit it, potentially impacting additional products (scope change). This can result in unauthorized access to and modification of critical data.

Vulnerability in PeopleSoft Enterprise PeopleTools (Ren Server component). An unauthenticated attacker with network access via HTTP can cause a complete denial of service (DoS) by hanging or frequently crashing the system.

Vulnerability in PeopleSoft Enterprise PeopleTools (Charting component). A low privileged attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to data or modify it.

Vulnerability in PeopleSoft Enterprise PeopleTools (Business Interlink component). Difficult to exploit, but an unauthenticated attacker with network access via HTTP can compromise the system. High impact on confidentiality, integrity, and availability.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Security) versions 8.61 and 8.62. Difficult to exploit, requires logon to infrastructure, allows unauthorized access and data modification, with potential impact on other products.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: nVision) versions 8.61-8.63. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to fully compromise the system.

Vulnerability in Oracle's PeopleSoft Enterprise PeopleTools product (component: Tuxedo) affects versions 8.61-8.63. It is difficult to exploit but allows a low-privileged attacker with local access to take over the system. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Panel Processor) affects versions 8.61-8.63. It is difficult to exploit, requires low privileges, HTTP access, and user interaction, allowing unauthorized update, insert, or delete access and read access to a subset of data. Attacks may impact additional products.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: PeopleCode) affects versions 8.61-8.63. It is easily exploitable by a high-privileged attacker remotely via HTTP. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Configuration Manager) affects versions 8.61-8.63. It is easily exploitable by a low-privileged attacker remotely via SQL. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Data Mover) affects versions 8.61-8.63. It is difficult to exploit, requires high privileges, local access, and user interaction. Successful attacks can result in unauthorized creation, deletion, or modification of data, as well as partial denial of service.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Install and Packaging) affects versions 8.61-8.63. It is difficult to exploit by an unauthenticated attacker remotely via HTTP. Successful attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to critical data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Integration Broker). Affects versions 8.61-8.63. Difficult to exploit, allows unauthenticated attacker via HTTP to take over PeopleTools. Successful attack results in full system takeover.

Vulnerability in PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Affects versions 8.61-8.63. Difficult to exploit, allows unauthenticated attacker via HTTP to take over PeopleSoft Enterprise PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Panel Processor). Affects versions 8.61 and 8.62. Easily exploitable by an unauthenticated attacker with network access via HTTP, but requires user interaction. Successful attack allows unauthorized modification and read access to data.

Vulnerability in PeopleSoft Enterprise PeopleTools (Security component) allows a low-privileged attacker via HTTP to gain unauthorized read and modify access to data. Requires user interaction.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component PIA Core Technology. Affects versions 8.61 and 8.62. Allows a high-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all PeopleTools data.

Vulnerability in PeopleSoft Enterprise PeopleTools (Security component) allows a low-privileged attacker via HTTP to gain unauthorized read and modify access to data. Requires user interaction.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: OpenSearch Dashboards). An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized access to critical data, affecting other products.

Vulnerability in PeopleSoft Enterprise PeopleTools (Panel Processor component) allows a low-privileged attacker via HTTP to gain unauthorized read and modify access to data. Requires user interaction.

Vulnerability in PeopleSoft Enterprise PeopleTools (Process Scheduler component) allows a low-privileged authenticated attacker to modify and read critical data in other products (scope change). User interaction is required.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) version 8.62. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, but user interaction is required. The attack may impact additional products (scope change) and lead to unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) affecting versions 8.60, 8.61, and 8.62. An unauthenticated attacker with network access via HTTP can exploit it, but user interaction is required. Impact includes unauthorized update, insert, delete, and read access to some data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) in versions 8.60, 8.61, and 8.62. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to data (read and modify).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) affecting versions 8.60, 8.61, and 8.62. A high-privileged attacker with network access via HTTP can exploit it, potentially impacting other products (scope change). Impact includes unauthorized update, insert, delete, and read access to some data.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Affected versions are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) affecting versions 8.60, 8.61, and 8.62. An unauthenticated attacker with network access via HTTP can exploit it, but user interaction is required. The vulnerability may impact other products (scope change). Impact includes unauthorized update, insert, delete, and read access to some data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Rich Text Editor) in versions 8.60, 8.61, and 8.62. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to data (read and modify).