Skip to content
Noroxi

peoplesoft records

9 published records for vendor peoplesoft.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      9 records
      • CVE-2003-0950
        31Monitor

        PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet

        HighCVSS 7.5No exploitEPSS 2%

        peoplesoft · peopletoolsDec 15, 2003

      • CVE-2003-0104
        21Monitor

        Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via

        MediumCVSS 5.0No exploitEPSS 1%

        peoplesoft · peopletoolsMar 18, 2003

      • CVE-2003-0627
        20Monitor

        psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (application crash), possibly v

        MediumCVSS 5.0No exploitEPSS 1%

        peoplesoft · peopletoolsDec 31, 2003

      • CVE-2003-0626
        20Monitor

        psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footer

        MediumCVSS 5.0No exploitEPSS 1%

        peoplesoft · peopletoolsNov 13, 2003

      • CVE-2002-1252
        20Monitor

        The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read

        MediumCVSS 5.0No exploitEPSS 1%

        peoplesoft · peopletoolsFeb 7, 2003

      • CVE-2003-0628
        20Monitor

        PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the ful

        MediumCVSS 5.0No exploitEPSS 1%

        peoplesoft · peopletoolsDec 15, 2003

      • CVE-2004-2435
        17Monitor

        Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" using HTML Access, a

        MediumCVSS 4.3No exploitEPSS 1%

        peoplesoft · hrmsDec 31, 2004

      • CVE-2003-0629
        17Monitor

        Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to inser

        MediumCVSS 4.3No exploitEPSS 1%

        peoplesoft · peopletoolsDec 15, 2003

      • CVE-2006-0584
        8Monitor

        The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for l

        LowCVSS 2.1No exploitEPSS 0%

        peoplesoft · peopletoolsFeb 7, 2006