PeopleSoft Enterprise PeopleTools vulnerabilities | LiveThreat CVE Feed

Product

PeopleSoft Enterprise PeopleTools

by Oracle Corporation · last CVE Oct 20, 2026

On CISA KEVExploited in the wildRansomware-linked

435

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities435 In the news9 Timeline

Severity mix

Critical 18High 111Medium 260Low 18

Severity

All severities435 Critical18 High111 Medium260 Low18

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add PeopleSoft Enterprise PeopleTools to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-87410	6.8	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) Affected: 8.61 through 8.63
CVE-2026-60885	6.8	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications) Affected: 8.61; 8.62
CVE-2026-60869	6.8	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Data Sets) Affected: 8.61 through 8.63
CVE-2019-2594	6.8	1%	Apr 23	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server) Affected: 8.55; 8.56; 8.57
CVE-2020-7017	6.7	1%	Jul 27	In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw Affected: 8.58
CVE-2026-83427	6.6	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework) Affected: 8.61 through 8.63
CVE-2026-34277	6.6	0%	Apr 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core) Affected: 8.61; 8.62
CVE-2026-91519	6.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) Affected: 8.61 through 8.63
CVE-2026-91468	6.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: QAS) Affected: 8.61 through 8.63
CVE-2026-87409	6.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision) Affected: 8.61 through 8.63
CVE-2026-87349	6.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.61 through 8.63
CVE-2026-87344	6.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP) Affected: 8.61 through 8.63
CVE-2026-87342	6.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.61 through 8.63
CVE-2026-60743	6.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic) Affected: 8.61 through 8.63
CVE-2026-101488	6.5	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink) Affected: 8.61 through 8.63
CVE-2022-23437	6.5	12%	Jan 24	Infinite loop within Apache XercesJ xml parser Affected: 8.58; 8.59
CVE-2022-21345	6.5	1%	Jan 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) Affected: 8.58; 8.59
CVE-2021-43797	6.5	3%	Dec 9	HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling Affected: 8.58; 8.59
CVE-2021-35609	6.5	1%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) Affected: 8.57; 8.58; 8.59
CVE-2021-28363	6.5	2%	Mar 15	The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies Affected: 8.59
CVE-2020-14795	6.5	2%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.57; 8.58
CVE-2020-24977	6.5	3%	Sep 3	GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c Affected: 8.58
CVE-2019-2599	6.5	1%	Jul 23	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pagelet Wizard) Affected: 8.55; 8.56; 8.57
CVE-2019-2417	6.5	1%	Jan 16	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor) Affected: 8.55; 8.56; 8.57
CVE-2018-2977	6.5	2%	Jul 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.55; 8.56
CVE-2018-2695	6.5	1%	Jan 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query) Affected: 8.54; 8.55; 8.56
CVE-2018-2605	6.5	2%	Jan 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.54; 8.55; 8.56
CVE-2017-10280	6.5	2%	Oct 19	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework) Affected: 8.54; 8.55; 8.56
CVE-2017-3548	6.5	51%	Apr 24	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker) Affected: 8.54; 8.55
CVE-2017-3546	6.5	10%	Apr 24	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework) Affected: 8.54; 8.55
CVE-2017-3520	6.5	2%	Apr 24	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core) Affected: 8.54; 8.55
CVE-2016-5470	6.5	3%	Jul 21	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality via… Affected: 8.54; 8.55
CVE-2024-21158	6.4	0%	Jul 16	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.59; 8.60; 8.61
CVE-2017-10418	6.4	1%	Oct 19	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PeopleSoft CDA) Affected: 8.56
CVE-2026-101430	6.2	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework) Affected: 8.61 through 8.63
CVE-2018-2951	6.2	1%	Jul 18	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Configuration Manager) Affected: 8.55; 8.56
CVE-2017-10351	6.2	0%	Oct 19	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server) Affected: 8.54; 8.55; 8.56
CVE-2026-87345	6.1	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink) Affected: 8.61 through 8.63
CVE-2026-101490	6.1	0%	Oct 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core) Affected: 8.61 through 8.63
CVE-2026-34269	6.1	0%	Apr 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.61; 8.62
CVE-2026-21951	6.1	0%	Jan 20	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker) Affected: 8.60; 8.61; 8.62
CVE-2025-53055	6.1	0%	Oct 21	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.60 through 8.62
CVE-2025-30748	6.1	0%	Jul 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.60; 8.61; 8.62
CVE-2024-21202	6.1	0%	Oct 15	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.59; 8.60; 8.61
CVE-2024-21178	6.1	0%	Jul 16	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) Affected: 8.59; 8.60; 8.61
CVE-2024-21065	6.1	0%	Apr 16	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow) Affected: 8.59; 8.60; 8.61
CVE-2023-22080	6.1	0%	Oct 17	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology) Affected: 8.59; 8.60
CVE-2022-21520	6.1	1%	Jul 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core) Affected: 8.58; 8.59
CVE-2022-21470	6.1	1%	Apr 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler) Affected: 8.58; 8.59
CVE-2022-21458	6.1	1%	Apr 19	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Navigation Pages, Portal, Query) Affected: 8.58; 8.59