Login Request a demo
PE
Product
PeopleSoft Enterprise PeopleTools
by Oracle Corporation · last CVE Oct 20, 2026
On CISA KEVExploited in the wildRansomware-linked
435
CVEs
2
On KEV
9.9
Max CVSS
59
New 30D
Vulnerabilities435In the news9Timeline
Severity mix
Critical 18High 111Medium 260Low 18
Severity
All severities435Critical18High111Medium260Low18
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add PeopleSoft Enterprise PeopleTools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-3164
6.1
2%
Oct 17
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search)
Affected: 8.55; 8.56
CVE-2018-3154
6.1
2%
Oct 17
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal)
Affected: 8.55; 8.56
CVE-2018-3153
6.1
2%
Oct 17
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology)
Affected: 8.55; 8.56; 8.57
CVE-2018-3132
6.1
2%
Oct 17
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor)
Affected: 8.55; 8.56
CVE-2018-8032
6.1
11%
Aug 2
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services
Affected: 8.56; 8.57; 8.58
CVE-2018-2986
6.1
2%
Jul 18
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workflow)
Affected: 8.55; 8.56
CVE-2018-2985
6.1
2%
Jul 18
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workflow)
Affected: 8.55; 8.56
CVE-2018-2929
6.1
2%
Jul 18
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology)
Affected: 8.55; 8.56
CVE-2018-2919
6.1
2%
Jul 18
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Unified Navigation)
Affected: 8.55; 8.56
CVE-2018-2821
6.1
1%
Apr 19
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor)
Affected: 8.54; 8.55; 8.56
CVE-2018-2788
6.1
1%
Apr 19
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core)
Affected: 8.55; 8.56
CVE-2015-9251
6.1
30%
Jan 18
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript…
Affected: 8.55; 8.56; 8.57
CVE-2017-10406
6.1
1%
Oct 19
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology)
Affected: 8.54; 8.55; 8.56
CVE-2017-10381
6.1
1%
Oct 19
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology)
Affected: 8.54; 8.55; 8.56
CVE-2017-10327
6.1
1%
Oct 19
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query)
Affected: 8.54; 8.55; 8.56
CVE-2017-10158
6.1
1%
Oct 19
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Core)
Affected: 8.54; 8.55; 8.56
CVE-2017-10253
6.1
1%
Aug 8
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pivot Grid)
Affected: 8.54; 8.55
CVE-2017-10249
6.1
1%
Aug 8
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker)
Affected: 8.54; 8.55
CVE-2017-10106
6.1
2%
Aug 8
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal)
Affected: 8.54; 8.55
CVE-2017-10021
6.1
1%
Aug 8
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search)
Affected: 8.54; 8.55
CVE-2017-10017
6.1
1%
Aug 8
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workcenter)
Affected: 8.54; 8.55
CVE-2017-3300
6.1
2%
Jan 27
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Multichannel Framework)
Affected: 8.54; 8.55
CVE-2017-3299
6.1
1%
Jan 27
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality)
Affected: 8.54; 8.55
CVE-2017-3298
6.1
1%
Jan 27
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology)
Affected: 8.54; 8.55
CVE-2016-8329
6.1
1%
Jan 27
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Mobile Application Platform)
Affected: 8.54; 8.55
CVE-2016-5530
6.1
2%
Oct 25
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and…
Affected: 8.54; 8.55
CVE-2016-5529
6.1
2%
Oct 25
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and…
Affected: 8.54; 8.55
CVE-2016-3478
6.1
2%
Jul 21
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality…
Affected: 8.53; 8.54; 8.55
CVE-2026-91505
6.0
0%
Oct 20
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting)
Affected: 8.61; 8.62
CVE-2026-60968
6.0
0%
Oct 20
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt)
Affected: 8.61 through 8.63
CVE-2026-101389
5.9
0%
Oct 20
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink)
Affected: 8.61 through 8.63
CVE-2021-4160
5.9
4%
Jan 28
There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure
Affected: 8.58; 8.59
CVE-2021-22947
5.9
3%
Sep 29
When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple…
Affected: 8.57; 8.58; 8.59
CVE-2021-3537
5.9
4%
May 14
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference
Affected: 8.58
CVE-2021-3449
5.9
64%
Mar 25
NULL pointer deref in signature_algorithms processing
Affected: 8.57; 8.58; 8.59
CVE-2021-27568
5.9
3%
Feb 23
An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4
Affected: 8.58; 8.59
CVE-2021-23841
5.9
7%
Feb 16
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509…
Affected: 8.57; 8.58; 8.59
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: 8.56; 8.57; 8.58
CVE-2018-0734
5.9
12%
Oct 30
Timing attack against DSA
Affected: 8.55; 8.56; 8.57
CVE-2018-0735
5.9
5%
Oct 29
Timing attack against ECDSA signature generation
Affected: 8.55; 8.56; 8.57
CVE-2017-10422
5.9
2%
Oct 19
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant)
Affected: 8.54
CVE-2015-3197
5.9
11%
Feb 15
ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat…
Affected: 8.53; 8.54; 8.55
CVE-2026-60500
5.8
0%
Oct 20
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server)
Affected: 8.61 through 8.63
CVE-2017-3292
5.7
2%
Jan 27
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker)
Affected: 8.54; 8.55
CVE-2026-60839
5.5
0%
Oct 20
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query)
Affected: 8.61; 8.62
CVE-2025-53061
5.5
0%
Oct 21
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology)
Affected: 8.60 through 8.62
CVE-2022-39407
5.5
0%
Oct 18
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security)
Affected: 8.58; 8.59; 8.60
CVE-2021-27906
5.5
3%
Mar 19
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file
Affected: 8.58; 8.59
CVE-2019-12415
5.5
1%
Oct 23
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files…
Affected: 8.57; 8.58; 8.59
CVE-2026-83372
5.4
0%
Oct 20
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal)
Affected: 8.61 through 8.63
Page 3 of 6 · 260 total
1234…6