Vulnerabilities

TI-2006-00567 CVE-2006-0584 · GHSA-hh4f-g5fg-535x

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key…

LOW 11

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output str…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00332 Published 2006-02-08 No fix listed

TI-2004-02305 CVE-2004-2435 · GHSA-r9p8-3jp7-c498

Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System…

LOW 22

Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified (1…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2005-08-20 No fix listed

TI-2003-00584 CVE-2003-0627 · GHSA-qcwv-rfhg-2w63

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause…

LOW 26

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (application crash), possibly via the headername and footername arguments.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01591 Published 2005-04-14 No fix listed

TI-2003-00583 CVE-2003-0626 · GHSA-94g5-hq49-m9c3

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read…

LOW 26

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footername arguments.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01528 Published 2005-04-14 No fix listed

TI-2003-00099 CVE-2003-0104 · GHSA-5ggv-9h6j-2x36

Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows…

LOW 26

Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0179 Published 2004-09-01 No fix listed

TI-2002-01201 CVE-2002-1252 · GHSA-g8hf-fqm5-7rhh

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various…

LOW 26

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST r…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01373 Published 2004-09-01 No fix listed

TI-2003-00861 CVE-2003-0950 · GHSA-cr3c-c3mj-8xqv

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary…

LOW 37

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0211 Published 2003-11-18 No fix listed

TI-2003-00586 CVE-2003-0629 · GHSA-66qq-w76w-935h

Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for…

LOW 22

Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01037 Published 2003-11-18 No fix listed

TI-2003-00585 CVE-2003-0628 · GHSA-p7fx-hjx6-67xj

PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43…

LOW 26

PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an inva…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01324 Published 2003-11-18 No fix listed

Vulnerabilities

Filters