PatchTheCVEpeoplesoft vulnerabilities
Recent CVEs affecting peoplesoft products. 9 tracked.
peoplesoft has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-02-08. Highest priority: CVE-2003-0950 (score 47/100).
- CVE-2006-0584 LOW 2.1 DOWNGRADE The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user password
- CVE-2004-2435 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web
- CVE-2003-0950 HIGH 7.5 DOWNGRADE PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading
- CVE-2003-0629 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier al
- CVE-2003-0628 MEDIUM 5.0 DOWNGRADE PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remo
- CVE-2003-0627 MEDIUM 5.0 DOWNGRADE psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (
- CVE-2003-0626 MEDIUM 5.0 DOWNGRADE psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via th
- CVE-2003-0104 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to
- CVE-2002-1252 MEDIUM 5.0 DOWNGRADE The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, al
FAQ
How do I fix peoplesoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is peoplesoft being exploited right now?
None of the tracked peoplesoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which peoplesoft CVE should I patch first?
CVE-2003-0950 currently ranks highest (47/100): PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading.