PeopleSoft Enterprise PeopleTools vulnerabilities | LiveThreat CVE Feed

Product

PeopleSoft Enterprise PeopleTools

by Oracle · last CVE Oct 20, 2026

On CISA KEVExploited in the wildRansomware-linked

435

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities435 In the news9 Timeline

Severity mix

Critical 18High 111Medium 260Low 18

Severity

All severities435 Critical18 High111 Medium260 Low18

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add PeopleSoft Enterprise PeopleTools to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-32808	5.4	1%	Aug 12	ckeditor is an open source WYSIWYG HTML editor with rich content support Affected: 8.57; 8.58; 8.59
CVE-2019-2597	5.4	1%	Apr 23	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology) Affected: 8.55; 8.56; 8.57
CVE-2018-3016	5.4	1%	Jul 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.55; 8.56
CVE-2017-10394	5.4	1%	Oct 19	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security) Affected: 8.54; 8.55; 8.56
CVE-2017-10027	5.4	1%	Aug 8	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation) Affected: 8.54; 8.55
CVE-2016-3442	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-3423	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-3417	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-0698	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-0685	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-0683	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-0408	5.4	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2026-91497	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt) Affected: 8.61 through 8.63
CVE-2026-87415	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) Affected: 8.61 through 8.63
CVE-2026-87336	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61 through 8.63
CVE-2026-60882	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework) Affected: 8.61; 8.62
CVE-2026-101433	5.3	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework) Affected: 8.61 through 8.63
CVE-2023-21916	5.3	1%	Apr 18	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server) Affected: 8.58; 8.59; 8.60
CVE-2021-44532	5.3	10%	Feb 24	Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format Affected: 8.58; 8.59
CVE-2021-44533	5.3	9%	Feb 24	Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly Affected: 8.58; 8.59
CVE-2022-21364	5.3	2%	Jan 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic) Affected: 8.57; 8.58; 8.59
CVE-2021-22939	5.3	15%	Aug 16	If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an… Affected: 8.57; 8.58; 8.59
CVE-2021-22925	5.3	5%	Aug 5	curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl Affected: 8.57; 8.58; 8.59
CVE-2021-2407	5.3	1%	Jul 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.57; 8.58; 8.59
CVE-2020-28500	5.3	7%	Feb 15	Regular Expression Denial of Service (ReDoS) Affected: 8.58; 8.59
CVE-2020-13956	5.3	9%	Dec 2	Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick… Affected: 8.57; 8.58
CVE-2020-14806	5.3	1%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query) Affected: 8.56; 8.57; 8.58
CVE-2020-14558	5.3	1%	Jul 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.56; 8.57; 8.58
CVE-2020-2775	5.3	1%	Apr 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.56; 8.57; 8.58
CVE-2020-1954	5.3	6%	Apr 1	Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus Affected: 8.56; 8.56
CVE-2019-1551	5.3	14%	Dec 6	rsaz_512_sqr overflow bug on x86_64 Affected: 8.56; 8.57; 8.58
CVE-2019-2404	5.3	2%	Jan 16	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal) Affected: 8.55; 8.56; 8.57
CVE-2018-3261	5.3	2%	Oct 17	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.55; 8.56; 8.57
CVE-2018-3239	5.3	2%	Oct 17	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.55; 8.56
CVE-2018-3202	5.3	2%	Oct 17	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor) Affected: 8.55; 8.56
CVE-2018-3198	5.3	2%	Oct 17	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal) Affected: 8.55; 8.56; 8.57
CVE-2018-2653	5.3	2%	Jan 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Connected Query) Affected: 8.54; 8.55; 8.56
CVE-2017-10045	5.3	2%	Aug 8	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.54; 8.55
CVE-2017-3527	5.3	2%	Apr 24	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core) Affected: 8.54; 8.55
CVE-2026-101491	5.0	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query) Affected: 8.61 through 8.63
CVE-2026-91263	4.9	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Notification Configuration) Affected: 8.61 through 8.63
CVE-2026-47049	4.9	0%	Jul 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.61; 8.62
CVE-2025-53059	4.9	0%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards) Affected: 8.60; 8.61; 8.62
CVE-2024-21097	4.9	1%	Apr 16	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.59; 8.60; 8.61
CVE-2023-21981	4.9	1%	Apr 18	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search) Affected: 8.58; 8.59; 8.60
CVE-2022-21521	4.9	1%	Jul 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher) Affected: 8.58; 8.59
CVE-2026-87343	4.8	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61 through 8.63
CVE-2020-7016	4.8	1%	Jul 27	Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion Affected: 8.58
CVE-2026-70869	4.7	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker) Affected: 8.61 through 8.63
CVE-2019-3023	4.7	1%	Oct 16	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet) Affected: 8.56; 8.57