PeopleSoft Enterprise PeopleTools vulnerabilities | LiveThreat CVE Feed

Product

PeopleSoft Enterprise PeopleTools

by Oracle · last CVE Oct 20, 2026

On CISA KEVExploited in the wildRansomware-linked

435

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities435 In the news9 Timeline

Severity mix

Critical 18High 111Medium 260Low 18

Severity

All severities435 Critical18 High111 Medium260 Low18

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add PeopleSoft Enterprise PeopleTools to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-83017	8.8	0%	Sep 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) Affected: 8.61 through 8.63
CVE-2026-60967	8.8	0%	Aug 18	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision) Affected: 8.61 through 8.63
CVE-2026-60879	8.8	0%	Aug 18	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Configuration Manager) Affected: 8.61 through 8.63
CVE-2024-21255	8.8	1%	Oct 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XMLPublisher) Affected: 8.59; 8.60; 8.61
CVE-2021-3518	8.8	22%	May 18	There's a flaw in libxml2 in versions before 2.9.11 Affected: 8.58
CVE-2019-3856	8.8	6%	Mar 25	An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed Affected: 8.56; 8.57
CVE-2019-3857	8.8	6%	Mar 25	An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are… Affected: 8.56; 8.57
CVE-2019-3855	8.8	9%	Mar 21	An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server Affected: 8.56; 8.57
CVE-2019-2416	8.8	2%	Jan 16	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server) Affected: 8.55; 8.56; 8.57
CVE-2018-2772	8.8	2%	Apr 19	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor) Affected: 8.54; 8.55; 8.56
CVE-2018-2593	8.8	2%	Jan 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology) Affected: 8.54; 8.55; 8.56
CVE-2026-47017	8.7	0%	Jul 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler) Affected: 8.61; 8.62
CVE-2019-2598	8.7	1%	Apr 23	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR) Affected: 8.55; 8.56; 8.57
CVE-2016-0679	8.7	1%	Apr 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8; 8.53; 8.55; 54
CVE-2021-3517	8.6	17%	May 19	There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11 Affected: 8.58
CVE-2020-2776	8.6	2%	Apr 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.56; 8.57
CVE-2023-22014	8.4	0%	Jul 18	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.59; 8.60
CVE-2021-2063	8.4	0%	Jan 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.56; 8.57; 8.58
CVE-2017-10146	8.3	2%	Aug 8	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal) Affected: 8.54; 8.55
CVE-2017-10061	8.3	2%	Aug 8	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.54; 8.55
CVE-2022-21824	8.2	22%	Feb 24	Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously… Affected: 8.58; 8.59
CVE-2016-8293	8.2	2%	Oct 25	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and… Affected: 8.54; 8.55
CVE-2016-8291	8.2	2%	Oct 25	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and… Affected: 8.54; 8.55
CVE-2016-5465	8.2	2%	Jul 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality… Affected: 8.53; 8.54; 8.55
CVE-2026-101411	8.1	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink) Affected: 8.61 through 8.63
CVE-2026-101390	8.1	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink) Affected: 8.61 through 8.63
CVE-2026-83019	8.1	0%	Sep 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) Affected: 8.61 through 8.63
CVE-2026-83014	8.1	0%	Sep 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager) Affected: 8.61 through 8.63
CVE-2026-60831	8.1	0%	Aug 18	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker) Affected: 8.61 through 8.63
CVE-2026-60742	8.1	0%	Aug 18	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.61 through 8.63
CVE-2026-34309	8.1	0%	Apr 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.61; 8.62
CVE-2024-21214	8.1	1%	Oct 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query) Affected: 8.59; 8.60; 8.61
CVE-2021-2071	8.1	2%	Jan 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search) Affected: 8.56; 8.57; 8.58
CVE-2020-28052	8.1	7%	Dec 18	An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66 Affected: 8.56; 8.57; 8.58
CVE-2017-10301	8.1	1%	Jan 18	Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal) Affected: 9.1.00
CVE-2017-10364	8.1	2%	Oct 19	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Environment Mgmt) Affected: 8.54; 8.55; 8.56
CVE-2026-83018	7.8	0%	Sep 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) Affected: 8.61 through 8.63
CVE-2016-5472	7.8	0%	Jul 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity,… Affected: 8.54; 8.55
CVE-2019-2932	7.7	1%	Oct 16	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager) Affected: 8.56; 8.57
CVE-2016-8296	7.6	1%	Oct 25	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect… Affected: 8.54; 8.55
CVE-2026-101428	7.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) Affected: 8.61 through 8.63
CVE-2026-101416	7.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin) Affected: 8.61 through 8.63
CVE-2026-60975	7.5	0%	Aug 18	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.61; 8.62
CVE-2025-53050	7.5	0%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor) Affected: 8.60 through 8.62
CVE-2025-21545	7.5	1%	Jan 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch) Affected: 8.60; 8.61
CVE-2022-24729	7.5	2%	Mar 16	CKEditor4 is an open source what-you-see-is-what-you-get HTML editor Affected: 8.58; 8.59
CVE-2020-36518	7.5	5%	Mar 11	jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects Affected: 8.58; 8.59
CVE-2021-37137	7.5	7%	Oct 19	The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage Affected: 8.57; 8.58; 8.59
CVE-2021-37136	7.5	6%	Oct 19	The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression) Affected: 8.48; 8.57; 8.58; 8.59
CVE-2021-22946	7.5	5%	Sep 29	A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line… Affected: 8.57; 8.58; 8.59