PeopleSoft Enterprise PeopleTools vulnerabilities | LiveThreat CVE Feed

Product

PeopleSoft Enterprise PeopleTools

by Oracle Corporation · last CVE Oct 20, 2026

On CISA KEVExploited in the wildRansomware-linked

442

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities442 In the news9 Timeline

Severity mix

Critical 18High 112Medium 265Low 19

Severity

All severities442 Critical18 High112 Medium265 Low19

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add PeopleSoft Enterprise PeopleTools to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-14795	6.5	2%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.57; 8.58
CVE-2020-24977	6.5	3%	Sep 3	GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c Affected: 8.58
CVE-2019-2599	6.5	1%	Jul 23	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pagelet Wizard) Affected: 8.55; 8.56; 8.57
CVE-2019-2417	6.5	1%	Jan 16	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor) Affected: 8.55; 8.56; 8.57
CVE-2018-2977	6.5	2%	Jul 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.55; 8.56
CVE-2018-2605	6.5	2%	Jan 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.54; 8.55; 8.56
CVE-2018-2695	6.5	1%	Jan 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query) Affected: 8.54; 8.55; 8.56
CVE-2017-10280	6.5	2%	Oct 19	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework) Affected: 8.54; 8.55; 8.56
CVE-2017-3520	6.5	2%	Apr 24	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core) Affected: 8.54; 8.55
CVE-2017-3548	6.5	51%	Apr 24	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.54; 8.55
CVE-2017-3546	6.5	10%	Apr 24	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework) Affected: 8.54; 8.55
CVE-2016-5470	6.5	3%	Jul 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality via… Affected: 8.54; 8.55
CVE-2024-21158	6.4	0%	Jul 16	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.59; 8.60; 8.61
CVE-2017-10418	6.4	1%	Oct 19	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PeopleSoft CDA) Affected: 8.56
CVE-2026-101430	6.2	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework) Affected: 8.61 through 8.63
CVE-2018-2951	6.2	1%	Jul 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Configuration Manager) Affected: 8.55; 8.56
CVE-2017-10351	6.2	0%	Oct 19	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server) Affected: 8.54; 8.55; 8.56
CVE-2026-87345	6.1	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink) Affected: 8.61 through 8.63
CVE-2026-101490	6.1	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core) Affected: 8.61 through 8.63
CVE-2026-34269	6.1	0%	Apr 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61; 8.62
CVE-2026-21951	6.1	0%	Jan 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker) Affected: 8.60; 8.61; 8.62
CVE-2025-53055	6.1	0%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.60 through 8.62
CVE-2025-30748	6.1	0%	Jul 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.60; 8.61; 8.62
CVE-2024-21202	6.1	0%	Oct 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.59; 8.60; 8.61
CVE-2024-21178	6.1	0%	Jul 16	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.59; 8.60; 8.61
CVE-2024-21065	6.1	0%	Apr 16	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow) Affected: 8.59; 8.60; 8.61
CVE-2023-22080	6.1	0%	Oct 17	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.59; 8.60
CVE-2022-21520	6.1	1%	Jul 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core) Affected: 8.58; 8.59
CVE-2022-21470	6.1	1%	Apr 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler) Affected: 8.58; 8.59
CVE-2022-21458	6.1	1%	Apr 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Navigation Pages, Portal, Query) Affected: 8.58; 8.59
CVE-2022-21456	6.1	1%	Apr 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Navigation Pages, Portal, Query) Affected: 8.58; 8.59
CVE-2022-21369	6.1	1%	Jan 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor) Affected: 8.57; 8.58; 8.59
CVE-2022-21359	6.1	1%	Jan 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Optimization Framework) Affected: 8.57; 8.58; 8.59
CVE-2022-21272	6.1	1%	Jan 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.57; 8.58; 8.59
CVE-2021-41183	6.1	9%	Oct 26	XSS in `*Text` options of the Datepicker widget Affected: 8.58; 8.59
CVE-2021-41184	6.1	41%	Oct 26	XSS in the `of` option of the `.position()` util Affected: 8.58; 8.59
CVE-2021-41182	6.1	39%	Oct 26	XSS in the `altField` option of the Datepicker widget Affected: 8.58; 8.59
CVE-2021-35595	6.1	1%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink) Affected: 8.57; 8.58; 8.59
CVE-2021-35568	6.1	1%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor) Affected: 8.57; 8.58; 8.59
CVE-2021-2216	6.1	1%	Apr 22	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework) Affected: 8.56; 8.57; 8.58
CVE-2021-2043	6.1	1%	Jan 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.56; 8.57; 8.58
CVE-2020-27193	6.1	2%	Nov 12	A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and… Affected: 8.56; 8.57; 8.58
CVE-2020-14832	6.1	1%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker) Affected: 8.56; 8.57; 8.58
CVE-2020-14802	6.1	1%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.56; 8.57; 8.58
CVE-2020-14801	6.1	1%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.56; 8.57; 8.58
CVE-2020-14813	6.1	1%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Grids) Affected: 8.56; 8.57; 8.58
CVE-2020-14627	6.1	1%	Jul 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query) Affected: 8.56; 8.57; 8.58
CVE-2020-14592	6.1	1%	Jul 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor) Affected: 8.56; 8.57; 8.58
CVE-2020-7656	6.1	6%	May 19	jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method Affected: 8.58
CVE-2020-11022	6.1	99%	Apr 29	jQuery has a potential XSS vulnerability Affected: 8.56; 8.57; 8.58; 8.56; 8.57; 8.58