Vulnerabilities

TI-2026-27437 CVE-2026-35289 · GHSA-7jmw-w738-jm9h

Missing authentication in Oracle PeopleSoft Enterprise PT PeopleTools

LOW 37

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00407 Published 2026-06-16 No fix listed CWE-306

TI-2026-27436 CVE-2026-35288 · GHSA-c768-v4cf-jvx5

Improper privilege management in Oracle PeopleSoft Enterprise PT PeopleTools

LOW 37

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00188 Published 2026-06-16 No fix listed CWE-269

TI-2026-27427 CVE-2026-35279 · GHSA-j9rp-p6m7-9ppx

Missing authentication in Oracle PeopleSoft Enterprise PT PeopleTools

LOW 37

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00374 Published 2026-06-16 No fix listed CWE-306

TI-2026-27426 CVE-2026-35278 · GHSA-j52w-q68f-h7f9

Missing authentication in Oracle PeopleSoft Enterprise PT PeopleTools

MEDIUM 50

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00644 Published 2026-06-16 No fix listed CWE-306

TI-2026-27424 CVE-2026-35276 · GHSA-24rg-p2fj-6mwp

Missing authentication in Oracle PeopleSoft Enterprise PT PeopleTools

LOW 37

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Application Server).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00416 Published 2026-06-16 No fix listed CWE-306

TI-2026-27422 CVE-2026-35274 · GHSA-p535-9j5m-43rw

Missing authentication in Oracle PeopleSoft Enterprise PT PeopleTools

MEDIUM 42

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00384 Published 2026-06-16 No fix listed CWE-306

TI-2026-27420 CVE-2026-35272 · GHSA-mhvw-hx74-5rhj

Improper privilege management in Oracle PeopleSoft Enterprise PT PeopleTools

LOW 38

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.002 Published 2026-06-16 No fix listed CWE-269

TI-2026-27419 CVE-2026-35271 · GHSA-24j9-242h-cf9v

Improper access control in Oracle PeopleSoft Enterprise PT PeopleTools

MEDIUM 40

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Weblogic).

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00324 Published 2026-06-16 No fix listed CWE-284

TI-2021-02077 CVE-2021-2408 · GHSA-8jqj-9r2h-p8hv

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft…

LOW 29

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Notification Configuration).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00853 Published 2021-07-20 No fix listed

TI-2021-01894 CVE-2021-2218 · GHSA-8pc7-6wg7-664j

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft…

MEDIUM 45

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Health Center).

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.01293 Published 2021-04-22 No fix listed

TI-2020-10932 CVE-2020-13956 · GHSA-7r82-7xv7-xcpj

Improper input validation in Apache HttpClient

MEDIUM 42

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request executio…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.09032 Published 2020-12-02 Partial fix · 4.5.13, 5.0.3 CWE-20

TI-2017-13794 CVE-2017-18640 · GHSA-rvwf-54qp-4r6v

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load…

MEDIUM 55

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.26723 Published 2019-12-12 Partial fix · 1.26 CWE-776

TI-2019-09249 CVE-2019-12402 · GHSA-53x6-4x5p-rrvv

Infinite loop in Apache Commons Compress

MEDIUM 49

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16157 Published 2019-08-29 Partial fix · 1.19 CWE-835

TI-2019-07411 CVE-2019-10086 · GHSA-6phf-73q6-gh87

Deserialization of untrusted data in Apache Commons Beanutils

MEDIUM 61

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.29082 Published 2019-08-20 Partial fix · 1.9.4 CWE-502

TI-2018-02102 CVE-2018-2793 · GHSA-233r-vr3f-2m36

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft…

LOW 28

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PsAdmin).

CVSS 3.0MEDIUM 6.2 Local No auth No interaction EPSS 0.00489 Published 2018-04-19 No fix listed

Vulnerabilities

Filters