PatchTheCVEpeopletools vulnerabilities and fixes
Recent CVEs affecting peopletools, with upgrade or downgrade steps. 10 tracked.
peopletools has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2017-06-19. Highest priority: CVE-2003-0950 (score 47/100).
- CVE-2017-1000376 HIGH 7.0 MITIGATE DOWNGRADE libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by over
- CVE-2006-0584 LOW 2.1 DOWNGRADE The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user password
- CVE-2003-0950 HIGH 7.5 DOWNGRADE PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading
- CVE-2003-0841 MEDIUM 5.0 DOWNGRADE The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document
- CVE-2003-0629 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier al
- CVE-2003-0628 MEDIUM 5.0 DOWNGRADE PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remo
- CVE-2003-0627 MEDIUM 5.0 DOWNGRADE psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (
- CVE-2003-0626 MEDIUM 5.0 DOWNGRADE psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via th
- CVE-2003-0104 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to
- CVE-2002-1252 MEDIUM 5.0 DOWNGRADE The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, al
FAQ
How do I fix peopletools vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is peopletools being exploited right now?
None of the tracked peopletools CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which peopletools CVE should I patch first?
CVE-2003-0950 currently ranks highest (47/100): PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading.