Oracle

Peoplesoft Enterprise Peopletools

339 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2020-8285

Exploit
  • EPSS 0.59%
  • Veröffentlicht 14.12.2020 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:38:39

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

3.3

CVE-2020-8908

Exploit
  • EPSS 0.01%
  • Veröffentlicht 10.12.2020 23:15:13
  • Zuletzt bearbeitet 21.11.2024 05:39:40

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By defau...

5.9

CVE-2020-1971

  • EPSS 0.34%
  • Veröffentlicht 08.12.2020 16:15:11
  • Zuletzt bearbeitet 21.11.2024 05:11:45

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they...

5.3

CVE-2020-13956

  • EPSS 0.51%
  • Veröffentlicht 02.12.2020 17:15:14
  • Zuletzt bearbeitet 21.11.2024 05:02:13

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

6.1

CVE-2020-27193

  • EPSS 0.91%
  • Veröffentlicht 12.11.2020 21:15:11
  • Zuletzt bearbeitet 21.11.2024 05:20:50

A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.

4

CVE-2020-14847

  • EPSS 0.2%
  • Veröffentlicht 21.10.2020 15:15:23
  • Zuletzt bearbeitet 21.11.2024 05:04:18

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access...

5.8

CVE-2020-14832

  • EPSS 0.58%
  • Veröffentlicht 21.10.2020 15:15:22
  • Zuletzt bearbeitet 21.11.2024 05:04:16

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with n...

4.3

CVE-2020-14801

  • EPSS 0.58%
  • Veröffentlicht 21.10.2020 15:15:20
  • Zuletzt bearbeitet 21.11.2024 05:04:11

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with ...

4.3

CVE-2020-14802

  • EPSS 0.58%
  • Veröffentlicht 21.10.2020 15:15:20
  • Zuletzt bearbeitet 21.11.2024 05:04:12

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with ...

5

CVE-2020-14806

  • EPSS 0.77%
  • Veröffentlicht 21.10.2020 15:15:20
  • Zuletzt bearbeitet 21.11.2024 05:04:12

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access...