Vulnerabilities

TI-2024-14031 CVE-2024-21255 · GHSA-526v-fwq8-9pgv

XML external entity injection in Oracle PeopleSoft Enterprise PeopleTools

MEDIUM 41

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XMLPublisher).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00581 Published 2024-10-15 No fix listed CWE-611

TI-2024-14001 CVE-2024-21214 · GHSA-894f-wmfc-4vj2

LOW 38

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00522 Published 2024-10-15 No fix listed

TI-2024-13989 CVE-2024-21202 · GHSA-2hcc-cvcm-gcc5

LOW 27

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00198 Published 2024-10-15 No fix listed CWE-352