PeopleSoft Enterprise PeopleTools vulnerabilities | LiveThreat CVE Feed

Product

PeopleSoft Enterprise PeopleTools

by Oracle · last CVE Oct 20, 2026

On CISA KEVExploited in the wildRansomware-linked

428

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities428 In the news9 Timeline

Severity mix

Critical 18High 110Medium 255Low 17

Severity

All severities428 Critical18 High110 Medium255 Low17

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add PeopleSoft Enterprise PeopleTools to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-0587	–	1%	Jan 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55
CVE-2016-0474	–	1%	Jan 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect integrity via… Affected: 8.54; 8.55
CVE-2016-0473	–	1%	Jan 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect integrity via… Affected: 8.54; 8.55
CVE-2016-0471	–	2%	Jan 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote attackers to affect confidentiality via… Affected: 8.53; 8.54
CVE-2016-0463	–	2%	Jan 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality… Affected: 8.53; 8.54; 8.55
CVE-2016-0462	–	2%	Jan 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect… Affected: 8.53; 8.54
CVE-2016-0460	–	2%	Jan 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.55 allows remote attackers to affect integrity via unknown vectors… Affected: 8.55
CVE-2015-7940	–	5%	Nov 9	The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series… Affected: 8.54; 8.55
CVE-2013-3761	–	1%	Jul 17	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products Portal 9.1 and PeopleTools 8.52 allows remote attackers to affect… Affected: 8.52
CVE-2013-3759	–	1%	Jul 17	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors… Affected: 8.52; 8.53
CVE-2013-2409	–	1%	Apr 17	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality… Affected: 8.51; 8.52; 8.53
CVE-2013-2406	–	1%	Apr 17	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect… Affected: 8.51; 8.52; 8.53
CVE-2011-3520	–	1%	Oct 18	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect… Affected: 8.49; 8.50; 8.51
CVE-2011-2315	–	2%	Oct 18	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect… Affected: 8.49; 8.50; 8.51
CVE-2011-2282	–	1%	Jul 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50.20 and 8.51.11 allows remote authenticated users to affect… Affected: 8.50.21; 8.51.11
CVE-2011-2280	–	1%	Jul 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 allows remote authenticated users to… Affected: 8.49.31; 8.50.20; 8.51.11
CVE-2011-2275	–	1%	Jul 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 allows remote attackers to affect… Affected: 8.49.32; 8.50.21; 8.51.11
CVE-2011-2274	–	1%	Jul 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 allows remote authenticated users to… Affected: 8.49.31; 8.49.32; 8.50.20; 8.50.21; 8.51.11
CVE-2011-0840	–	1%	Apr 20	Unspecified vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.49 GA through 8.49.30 allows remote authenticated users to affect confidentiality via unknown vectors… Affected: 8.49; 8.49
CVE-2008-0343	–	3%	Jan 17	Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06 Affected: 8.47; 8.48; 8.49
CVE-2008-0348	–	3%	Jan 17	Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07 have unknown impact… Affected: 8.47; 8.48; 8.49
CVE-2008-0349	–	3%	Jan 17	Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.15 and 8.49.07 has unknown impact and remote attack… Affected: 8.47; 8.48; 8.49
CVE-2008-0347	–	3%	Jan 17	Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and… Affected: 8.47; 8.48; 8.49
CVE-2008-0346	–	3%	Jan 17	Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka… Affected: 8.47; 8.48; 8.49
CVE-2008-0340	–	3%	Jan 17	Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to the (1)… Affected: 8.47; 8.48; 8.49
CVE-2008-0344	–	3%	Jan 17	Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vectors, aka DB07 Affected: 8.47; 8.48; 8.49
CVE-2008-0345	–	3%	Jan 17	Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08 Affected: 8.47; 8.48; 8.49
CVE-2007-3854	–	3%	Jul 18	Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the… Affected: 8.22; 8.47; 8.48; 8.49