Peoplesoft Enterprise PT Peopletools vulnerabilities

Product

Peoplesoft Enterprise PT Peopletools

by Oracle · last CVE Jun 16, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities15 In the news0 Timeline

Severity mix

Critical 1High 11Medium 3Low 0

Severity

All severities15 Critical1 High11 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Peoplesoft Enterprise PT Peopletools to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-35278	9.8	1%	Jun 16	Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor) Affected: 8.61; 8.62
CVE-2026-35271	8.7	0%	Jun 16	Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Weblogic) Affected: 8.61; 8.62
CVE-2026-35272	8.4	0%	Jun 16	Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package) Affected: 8.61; 8.62
CVE-2021-2218	8.3	1%	Apr 22	Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Health Center) Affected: 8.56; 8.57
CVE-2026-35288	8.2	0%	Jun 16	Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package) Affected: 8.61; 8.62
CVE-2026-35274	8.2	0%	Jun 16	Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package) Affected: 8.61; 8.62
CVE-2026-35289	8.1	0%	Jun 16	Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package) Affected: 8.61; 8.62
CVE-2026-35279	8.1	0%	Jun 16	Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor) Affected: 8.61; 8.62
CVE-2026-35276	8.1	0%	Jun 16	Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Application Server) Affected: 8.61; 8.62
CVE-2017-18640	7.5	27%	Dec 12	The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564 Affected: 8.56; 8.57; 8.58
CVE-2019-12402	7.5	16%	Aug 30	The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs Affected: 8.56; 8.57; 8.58
CVE-2019-10086	7.3	29%	Aug 20	In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property… Affected: 8.56; 8.57; 8.58
CVE-2018-2793	6.2	0%	Apr 19	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PsAdmin) Affected: 8.54; 8.55; 8.56
CVE-2021-2408	6.1	1%	Jul 21	Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Notification Configuration) Affected: 8.59
CVE-2020-13956	5.3	9%	Dec 2	Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick… Affected: 8.57; 8.58; 8.59