PeopleSoft Enterprise PeopleTools vulnerabilities

48 known vulnerabilities in PeopleSoft Enterprise PeopleTools from Oracle. 48 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  PeopleSoft Enterprise PeopleTools: Improper Access Control

  CVE-2026-34309Apr 21, 2026Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr

• 7.5 High severity

  PeopleSoft Enterprise PeopleTools: Uncontrolled Resource Consumption

  CVE-2025-53050Oct 21, 2025Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 7.5 High severity

  PeopleSoft Enterprise PeopleTools: Uncontrolled Resource Consumption

  CVE-2025-21545Jan 21, 2025Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch). Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

• 8.8 High severity

  PeopleSoft Enterprise PeopleTools: Improper Restriction of XML External Entity Reference

  CVE-2024-21255Oct 15, 2024Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XMLPublisher). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.4 High severity

  PeopleSoft Enterprise PT PeopleTools: Improper Access Control

  CVE-2023-22014Jul 18, 2023Oracle

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure w

• 7.5 High severity

  ckeditor4: Inefficient Regular Expression Complexity

  CVE-2022-24729Mar 16, 2022CkeditorEPSS 2.49%

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significan

• 8.2 High severity

  Node: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2022-21824Feb 24, 2022Node.jsEPSS 21.5%

  Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could b

• 9.8 Critical severity

  Oracle WebLogic Server, Injection Exploited

  CVE-2019-2725Apr 26, 2019OracleEPSS 100%

  Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac