PE
Product
PeopleSoft Enterprise PeopleTools
On CISA KEVExploited in the wildRansomware-linked
436
CVEs
2
On KEV
9.9
Max CVSS
60
New 30D
Severity mix
Critical 18High 112Medium 260Low 18
Watch
Add PeopleSoft Enterprise PeopleTools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47026 | 7.4 | Jul 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards) Affected: 8.61; 8.62 |
| CVE-2021-44531 | 7.4 | Feb 24 | Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates Affected: 8.58; 8.59 |
| CVE-2021-3712 | 7.4 | Aug 24 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length Affected: 8.57; 8.58; 8.59 |
| CVE-2021-2219 | 7.4 | Apr 22 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) Affected: 8.56; 8.57; 8.58 |
| CVE-2021-3450 | 7.4 | Mar 25 | CA certificate check bypass with X509_V_FLAG_X509_STRICT Affected: 8.57 through 8.59 |
| CVE-2020-8203 | 7.4 | Jul 15 | Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20 Affected: 8.58; 8.59 |
| CVE-2018-2990 | 7.4 | Jul 18 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.55; 8.56 |
| CVE-2017-10019 | 7.4 | Aug 8 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.54; 8.55 |
| CVE-2017-3547 | 7.4 | Apr 24 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework) Affected: 8.54; 8.55 |
| CVE-2016-3421 | 7.4 | Apr 21 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect… Affected: 8.53; 8.54; 8.55 |
| CVE-2019-10086 | 7.3 | Aug 20 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property… Affected: 8.56; 8.57 |
| CVE-2018-2774 | 7.3 | Apr 19 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR) Affected: 8.54; 8.55; 8.56 |
| CVE-2026-83016 | 7.2 | Sep 15 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) Affected: 8.61 through 8.63 |
| CVE-2026-60883 | 7.2 | Aug 18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PeopleCode) Affected: 8.61 through 8.63 |
| CVE-2026-60873 | 7.2 | Aug 18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover) Affected: 8.61 through 8.63 |
| CVE-2021-23337 | 7.2 | Feb 15 | Command Injection Affected: 8.58; 8.59 |
| CVE-2019-2443 | 7.2 | Jan 16 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: XML Publisher) Affected: 8.55; 8.56; 8.57 |
| CVE-2019-2433 | 7.2 | Jan 16 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: XML Publisher) Affected: 8.55; 8.56; 8.57 |
| CVE-2018-3192 | 7.2 | Oct 17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query) Affected: 8.55; 8.56 |
| CVE-2018-3165 | 7.2 | Oct 17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR) Affected: 8.55; 8.56 |
| CVE-2017-10362 | 7.2 | Oct 19 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Sawbridge) Affected: 8.54; 8.55; 8.56 |
| CVE-2016-3483 | 7.2 | Jul 21 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality… Affected: 8.53; 8.54; 8.55 |
| CVE-2026-101450 | 7.1 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker) Affected: 8.61 through 8.63 |
| CVE-2026-101388 | 7.1 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61 through 8.63 |
| CVE-2026-47015 | 7.1 | Jul 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.62 |
| CVE-2020-2782 | 7.1 | Apr 15 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query) Affected: 8.56; 8.57; 8.58 |
| CVE-2019-2748 | 7.1 | Jul 23 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server) Affected: 8.55; 8.56; 8.57 |
| CVE-2026-101429 | 7.0 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) Affected: 8.61 through 8.63 |
| CVE-2026-83015 | 7.0 | Sep 15 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager) Affected: 8.61 through 8.63 |
| CVE-2026-60902 | 7.0 | Aug 18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo) Affected: 8.61 through 8.63 |
| CVE-2026-87410 | 6.8 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) Affected: 8.61 through 8.63 |
| CVE-2026-60885 | 6.8 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications) Affected: 8.61; 8.62 |
| CVE-2026-60869 | 6.8 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Data Sets) Affected: 8.61 through 8.63 |
| CVE-2019-2594 | 6.8 | Apr 23 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server) Affected: 8.55; 8.56; 8.57 |
| CVE-2020-7017 | 6.7 | Jul 27 | In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw Affected: 8.58 |
| CVE-2026-83427 | 6.6 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework) Affected: 8.61 through 8.63 |
| CVE-2026-34277 | 6.6 | Apr 21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core) Affected: 8.61; 8.62 |
| CVE-2026-91519 | 6.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) Affected: 8.61 through 8.63 |
| CVE-2026-91468 | 6.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: QAS) Affected: 8.61 through 8.63 |
| CVE-2026-87409 | 6.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision) Affected: 8.61 through 8.63 |
| CVE-2026-87349 | 6.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.61 through 8.63 |
| CVE-2026-87344 | 6.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP) Affected: 8.61 through 8.63 |
| CVE-2026-87342 | 6.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.61 through 8.63 |
| CVE-2026-60743 | 6.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic) Affected: 8.61 through 8.63 |
| CVE-2026-101488 | 6.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink) Affected: 8.61 through 8.63 |
| CVE-2022-23437 | 6.5 | Jan 24 | Infinite loop within Apache XercesJ xml parser Affected: 8.58; 8.59 |
| CVE-2022-21345 | 6.5 | Jan 19 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.58; 8.59 |
| CVE-2021-43797 | 6.5 | Dec 9 | HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling Affected: 8.58; 8.59 |
| CVE-2021-35609 | 6.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) Affected: 8.57; 8.58; 8.59 |
| CVE-2021-28363 | 6.5 | Mar 15 | The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies Affected: 8.59 |