Oracle

Peoplesoft Enterprise Peopletools

355 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2020-9281

  • EPSS 4.33%
  • Veröffentlicht 07.03.2020 01:15:15
  • Zuletzt bearbeitet 21.11.2024 05:40:20

A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).

7.5

CVE-2019-20388

  • EPSS 4.39%
  • Veröffentlicht 21.01.2020 23:15:13
  • Zuletzt bearbeitet 17.12.2025 22:15:55

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

7.5

CVE-2020-7595

  • EPSS 7.84%
  • Veröffentlicht 21.01.2020 23:15:13
  • Zuletzt bearbeitet 03.12.2025 16:15:54

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

4.3

CVE-2020-2687

  • EPSS 1.37%
  • Veröffentlicht 15.01.2020 17:15:26
  • Zuletzt bearbeitet 21.11.2024 05:26:00

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network acc...

6.1

CVE-2020-2663

  • EPSS 1.04%
  • Veröffentlicht 15.01.2020 17:15:24
  • Zuletzt bearbeitet 21.11.2024 05:25:56

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with networ...

6.1

CVE-2020-2598

  • EPSS 1%
  • Veröffentlicht 15.01.2020 17:15:20
  • Zuletzt bearbeitet 21.11.2024 05:25:41

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Activity Guide). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network acc...

6.1

CVE-2020-2600

  • EPSS 1.16%
  • Veröffentlicht 15.01.2020 17:15:20
  • Zuletzt bearbeitet 21.11.2024 05:25:41

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network acc...

6.1

CVE-2020-2602

  • EPSS 1.16%
  • Veröffentlicht 15.01.2020 17:15:20
  • Zuletzt bearbeitet 21.11.2024 05:25:41

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

6.1

CVE-2020-2606

  • EPSS 1%
  • Veröffentlicht 15.01.2020 17:15:20
  • Zuletzt bearbeitet 21.11.2024 05:25:42

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with networ...

6.1

CVE-2020-2607

  • EPSS 1.21%
  • Veröffentlicht 15.01.2020 17:15:20
  • Zuletzt bearbeitet 21.11.2024 05:25:42

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with networ...