PeopleSoft Enterprise PeopleTools vulnerabilities | LiveThreat CVE Feed

Product

PeopleSoft Enterprise PeopleTools

by Oracle Corporation · last CVE Oct 20, 2026

On CISA KEVExploited in the wildRansomware-linked

442

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities442 In the news9 Timeline

Severity mix

Critical 18High 112Medium 265Low 19

Severity

All severities442 Critical18 High112 Medium265 Low19

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add PeopleSoft Enterprise PeopleTools to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-83372	5.4	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61 through 8.63
CVE-2026-101487	5.4	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61 through 8.63
CVE-2026-101486	5.4	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core) Affected: 8.61 through 8.63
CVE-2026-60152	5.4	0%	Jul 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor) Affected: 8.61; 8.62
CVE-2026-47051	5.4	0%	Jul 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.61; 8.62
CVE-2026-47048	5.4	0%	Jul 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.61; 8.62
CVE-2026-47024	5.4	0%	Jul 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor) Affected: 8.62
CVE-2026-34307	5.4	0%	Apr 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow) Affected: 8.61; 8.62
CVE-2026-21938	5.4	0%	Jan 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.60; 8.61; 8.62
CVE-2026-21934	5.4	0%	Jan 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications) Affected: 8.60; 8.61; 8.62
CVE-2025-53065	5.4	0%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.60; 8.61; 8.62
CVE-2025-53063	5.4	0%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.60; 8.61; 8.62
CVE-2025-53048	5.4	0%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor) Affected: 8.60 through 8.62
CVE-2025-30697	5.4	0%	Apr 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor) Affected: 8.60; 8.61; 8.62
CVE-2024-21070	5.4	0%	Apr 16	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework) Affected: 8.59; 8.60; 8.61
CVE-2023-21845	5.4	0%	Jan 17	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor) Affected: 8.60
CVE-2023-21844	5.4	0%	Jan 17	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search) Affected: 8.59; 8.60
CVE-2022-24728	5.4	1%	Mar 16	Cross-site Scripting in CKEditor4 Affected: 8.58; 8.59
CVE-2021-41165	5.4	2%	Nov 17	HTML comments vulnerability allowing to execute JavaScript code Affected: 8.58; 8.59
CVE-2021-41164	5.4	1%	Nov 17	Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML Affected: 8.58; 8.59
CVE-2021-37695	5.4	1%	Aug 12	Execution of JavaScript code using malformed HTML in ckeditor Affected: 8.57; 8.58; 8.59
CVE-2021-32809	5.4	1%	Aug 12	Arbitrary HTML injection vulnerability in ckeditor Affected: 8.57; 8.58; 8.59
CVE-2021-32808	5.4	1%	Aug 12	Cross-site scripting in ckeditor via abuse of undo functionality Affected: 8.57; 8.58; 8.59
CVE-2019-2597	5.4	1%	Apr 23	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology) Affected: 8.55; 8.56; 8.57
CVE-2018-3016	5.4	1%	Jul 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.55; 8.56
CVE-2017-10394	5.4	1%	Oct 19	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security) Affected: 8.54; 8.55; 8.56
CVE-2017-10027	5.4	1%	Aug 8	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation) Affected: 8.54; 8.55
CVE-2016-0683	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-0408	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-3442	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-0685	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-0698	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-3417	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-3423	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2026-91497	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt) Affected: 8.61 through 8.63
CVE-2026-87415	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) Affected: 8.61 through 8.63
CVE-2026-87336	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61 through 8.63
CVE-2026-60882	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework) Affected: 8.61; 8.62
CVE-2026-101433	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework) Affected: 8.61 through 8.63
CVE-2026-101432	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework) Affected: 8.61 through 8.63
CVE-2023-21916	5.3	1%	Apr 18	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server) Affected: 8.58; 8.59; 8.60
CVE-2021-44533	5.3	9%	Feb 24	Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly Affected: 8.58; 8.59
CVE-2021-44532	5.3	10%	Feb 24	Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format Affected: 8.58; 8.59
CVE-2022-21364	5.3	2%	Jan 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic) Affected: 8.57; 8.58; 8.59
CVE-2021-22939	5.3	15%	Aug 16	If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an… Affected: 8.57; 8.58; 8.59
CVE-2021-22925	5.3	5%	Aug 5	curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl Affected: 8.57; 8.58; 8.59
CVE-2021-2407	5.3	1%	Jul 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.57; 8.58; 8.59
CVE-2020-28500	5.3	7%	Feb 15	Regular Expression Denial of Service (ReDoS) Affected: 8.58; 8.59
CVE-2020-13956	5.3	9%	Dec 2	Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick… Affected: 8.57; 8.58
CVE-2020-14806	5.3	1%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query) Affected: 8.56; 8.57; 8.58