PE
Product
PeopleSoft Enterprise PeopleTools
On CISA KEVExploited in the wildRansomware-linked
435
CVEs
2
On KEV
9.9
Max CVSS
59
New 30D
Severity mix
Critical 18High 111Medium 260Low 18
Watch
Add PeopleSoft Enterprise PeopleTools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-3300 | 6.1 | Jan 27 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Multichannel Framework) Affected: 8.54; 8.55 |
| CVE-2017-3299 | 6.1 | Jan 27 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality) Affected: 8.54; 8.55 |
| CVE-2017-3298 | 6.1 | Jan 27 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology) Affected: 8.54; 8.55 |
| CVE-2016-8329 | 6.1 | Jan 27 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Mobile Application Platform) Affected: 8.54; 8.55 |
| CVE-2016-5530 | 6.1 | Oct 25 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and… Affected: 8.54; 8.55 |
| CVE-2016-5529 | 6.1 | Oct 25 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and… Affected: 8.54; 8.55 |
| CVE-2016-3478 | 6.1 | Jul 21 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality… Affected: 8.53; 8.54; 8.55 |
| CVE-2026-91505 | 6.0 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting) Affected: 8.61; 8.62 |
| CVE-2026-60968 | 6.0 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt) Affected: 8.61 through 8.63 |
| CVE-2026-101389 | 5.9 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink) Affected: 8.61 through 8.63 |
| CVE-2021-4160 | 5.9 | Jan 28 | There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure Affected: 8.58; 8.59 |
| CVE-2021-22947 | 5.9 | Sep 29 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple… Affected: 8.57; 8.58; 8.59 |
| CVE-2021-3537 | 5.9 | May 14 | A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference Affected: 8.58 |
| CVE-2021-3449 | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing Affected: 8.57; 8.58; 8.59 |
| CVE-2021-27568 | 5.9 | Feb 23 | An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4 Affected: 8.58; 8.59 |
| CVE-2021-23841 | 5.9 | Feb 16 | The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509… Affected: 8.57; 8.58; 8.59 |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: 8.56; 8.57; 8.58 |
| CVE-2018-0734 | 5.9 | Oct 30 | Timing attack against DSA Affected: 8.55; 8.56; 8.57 |
| CVE-2018-0735 | 5.9 | Oct 29 | Timing attack against ECDSA signature generation Affected: 8.55; 8.56; 8.57 |
| CVE-2017-10422 | 5.9 | Oct 19 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant) Affected: 8.54 |
| CVE-2015-3197 | 5.9 | Feb 15 | ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat… Affected: 8.53; 8.54; 8.55 |
| CVE-2026-60500 | 5.8 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server) Affected: 8.61 through 8.63 |
| CVE-2017-3292 | 5.7 | Jan 27 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.54; 8.55 |
| CVE-2026-60839 | 5.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query) Affected: 8.61; 8.62 |
| CVE-2025-53061 | 5.5 | Oct 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.60 through 8.62 |
| CVE-2022-39407 | 5.5 | Oct 18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.58; 8.59; 8.60 |
| CVE-2021-27906 | 5.5 | Mar 19 | A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file Affected: 8.58; 8.59 |
| CVE-2019-12415 | 5.5 | Oct 23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: 8.57; 8.58; 8.59 |
| CVE-2026-83372 | 5.4 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61 through 8.63 |
| CVE-2026-101487 | 5.4 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61 through 8.63 |
| CVE-2026-101486 | 5.4 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core) Affected: 8.61 through 8.63 |
| CVE-2026-60152 | 5.4 | Jul 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor) Affected: 8.61; 8.62 |
| CVE-2026-47051 | 5.4 | Jul 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.61; 8.62 |
| CVE-2026-47048 | 5.4 | Jul 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.61; 8.62 |
| CVE-2026-47024 | 5.4 | Jul 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor) Affected: 8.62 |
| CVE-2026-34307 | 5.4 | Apr 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow) Affected: 8.61; 8.62 |
| CVE-2026-21938 | 5.4 | Jan 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.60; 8.61; 8.62 |
| CVE-2026-21934 | 5.4 | Jan 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications) Affected: 8.60; 8.61; 8.62 |
| CVE-2025-53065 | 5.4 | Oct 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.60; 8.61; 8.62 |
| CVE-2025-53063 | 5.4 | Oct 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.60; 8.61; 8.62 |
| CVE-2025-53048 | 5.4 | Oct 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor) Affected: 8.60 through 8.62 |
| CVE-2025-30697 | 5.4 | Apr 15 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor) Affected: 8.60; 8.61; 8.62 |
| CVE-2024-21070 | 5.4 | Apr 16 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework) Affected: 8.59; 8.60; 8.61 |
| CVE-2023-21845 | 5.4 | Jan 18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor) Affected: 8.60 |
| CVE-2023-21844 | 5.4 | Jan 18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search) Affected: 8.59; 8.60 |
| CVE-2022-24728 | 5.4 | Mar 16 | CKEditor4 is an open source what-you-see-is-what-you-get HTML editor Affected: 8.58; 8.59 |
| CVE-2021-41165 | 5.4 | Nov 17 | CKEditor4 is an open source WYSIWYG HTML editor Affected: 8.58; 8.59 |
| CVE-2021-41164 | 5.4 | Nov 17 | CKEditor4 is an open source WYSIWYG HTML editor Affected: 8.58; 8.59 |
| CVE-2021-37695 | 5.4 | Aug 13 | ckeditor is an open source WYSIWYG HTML editor with rich content support Affected: 8.57; 8.58; 8.59 |
| CVE-2021-32809 | 5.4 | Aug 12 | ckeditor is an open source WYSIWYG HTML editor with rich content support Affected: 8.57; 8.58; 8.59 |
