Skip to contentOracle Peopletools vulnerabilities
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2023-220806.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2023-220148.4 High
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2023-219814.9 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2023-219165.3 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2023-218455.4 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2023-218445.4 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-394075.5 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-215439.8 Critical
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-215214.9 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-215206.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-215124.4 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-214706.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-214586.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-214566.1 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreRegular expression Denial of Service in dialog pluginCVE-2022-24729Fix available6.5 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreCross-site Scripting in CKEditor4CVE-2022-24728Fix available5.4 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 moreDeeply nested json in jackson-databindCVE-2020-36518Public exploitFix available7.5 High
- openssl, debian linux, oracle enterprise manager ops center +5 more +7 moreBN_mod_exp may produce incorrect results on MIPSCVE-2021-4160Fix available5.9 Medium
- apache software foundation xerces, apache xerces-j, netapp active iq unified manager +27 more +29 moreInfinite loop within Apache XercesJ xml parserCVE-2022-23437Fix availableEPSS 11.6%6.5 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-213696.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-213645.3 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-213596.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-213456.5 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2022-212726.1 Medium
- nodejs node, node.js, debian linux +9 more +11 moreDue to the formatting logic of the "console.table()" function it was not safe to allow user...CVE-2022-21824Fix availableEPSS 21.5%8.2 High
- nodejs node, node.js, debian linux +7 more +9 moreModerate: nodejs:14 security updateCVE-2021-44533Fix available5.3 Medium
- nodejs node, node.js, debian linux +7 more +9 moreNode.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names)...CVE-2021-44532Fix availableEPSS 10.4%5.3 Medium
- nodejs node, node.js, oracle graalvm +6 more +8 moreAccepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to...CVE-2021-44531Fix available7.4 High
- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationCVE-2021-45105Public exploitFix availableEPSS 100.0%5.9 Medium
- netty, debian linux, netapp oncommand workflow automation +15 more +17 moreHTTP fails to validate against control chars in header names which may lead to HTTP request smugglingCVE-2021-43797Fix available6.5 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreHTML comments vulnerability allowing to execute JavaScript codeCVE-2021-41165Fix available8.2 High
- ckeditor, ckeditor ckeditor4, drupal +8 more +10 moreAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTMLCVE-2021-41164Fix available8.2 High
- jquery jquery-ui, jqueryui jquery ui, drupal +25 more +27 moreXSS in the `of` option of the `.position()` utilCVE-2021-41184Public exploitFix availableEPSS 40.8%6.5 Medium
- jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 moreXSS in `*Text` options of the Datepicker widgetCVE-2021-41183Fix available6.5 Medium
- jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 moreXSS in the `altField` option of the Datepicker widgetCVE-2021-41182Public exploitFix availableEPSS 39.4%6.5 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2021-356096.5 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2021-355956.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2021-355686.1 Medium
- apache software foundation santuario, apache cxf, santuario xml security for java +16 more +18 moreBypass of the secureValidation propertyCVE-2021-40690Fix available7.5 High
- apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 moremod_proxy_uwsgi out of bound readCVE-2021-36160Fix availableEPSS 63.7%7.5 High
- apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 moreNULL pointer dereference in httpd coreCVE-2021-34798Fix availableEPSS 64.5%7.5 High
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...CVE-2021-22947Fix available5.9 Medium
- haxx curl, apple macos, debian linux +29 more +31 moreA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...CVE-2021-22946Fix available7.5 High
- debian linux, netapp oncommand insight, netty +9 more +11 moreSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary wayCVE-2021-37137Fix available7.5 High
- debian linux, netapp oncommand insight, netty +16 more +18 moreBzip2Decoder doesn't allow setting size restrictions for decompressed dataCVE-2021-37136Fix available7.5 High
- openssl, debian linux, mcafee epolicy orchestrator +238 more +240 moreRead buffer overruns processing ASN.1 stringsCVE-2021-3712Public exploitFix availableEPSS 48.1%7.4 High
- openssl, debian linux, netapp active iq unified manager +28 more +30 moreSM2 Decryption Buffer OverflowCVE-2021-3711Public exploitFix availableEPSS 87.8%9.8 Critical
- jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 moreCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptionsCVE-2021-37714Fix available7.5 High
- nodejs node, node.js, debian linux +5 more +7 moreNode.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an...CVE-2021-22940Fix availableEPSS 13.9%7.5 High
- nodejs node, node.js, debian linux +6 more +8 moreIf the Node.js https API was used incorrectly and "undefined" was in passed for the ...CVE-2021-22939Fix availableEPSS 14.7%5.3 Medium
- Show moreLoading…