[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4iveBC6uKl-8NQ9OYEGkhxq7elHtne40ciTJIKLPbd0":3,"g5a-family:oracle\u002Fpeoplesoft_enterprise_peopletools":196,"g5a-ex:oracle\u002Fpeoplesoft_enterprise_peopletools@*":197},{"success":4,"data":5},true,{"product":6,"versions":82,"topVulnerabilitiesByEpss":108,"kevVulnerabilities":168,"seoMetadata":174,"meta":193},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":81},"oracle","peoplesoft_enterprise_peopletools",25,345,1,"2025-10-21",[14,18,20,22,25,28,31,34,36,38,40,43,46,48,50,53,56,59,62,65,68,71,73,76,79],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"54",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"8",{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},"8.22",{"version":23,"cve_count":24,"kev_count":16,"has_kev":17},"8.47",9,{"version":26,"cve_count":27,"kev_count":16,"has_kev":17},"8.48",10,{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},"8.49",12,{"version":32,"cve_count":33,"kev_count":16,"has_kev":17},"8.49.31",2,{"version":35,"cve_count":33,"kev_count":16,"has_kev":17},"8.49.32",{"version":37,"cve_count":33,"kev_count":16,"has_kev":17},"8.50",{"version":39,"cve_count":33,"kev_count":16,"has_kev":17},"8.50.20",{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},"8.50.21",3,{"version":44,"cve_count":45,"kev_count":16,"has_kev":17},"8.51",4,{"version":47,"cve_count":45,"kev_count":16,"has_kev":17},"8.51.11",{"version":49,"cve_count":45,"kev_count":16,"has_kev":17},"8.52",{"version":51,"cve_count":52,"kev_count":16,"has_kev":17},"8.53",21,{"version":54,"cve_count":55,"kev_count":16,"has_kev":17},"8.54",79,{"version":57,"cve_count":58,"kev_count":16,"has_kev":17},"8.55",144,{"version":60,"cve_count":61,"kev_count":11,"has_kev":4},"8.56",150,{"version":63,"cve_count":64,"kev_count":11,"has_kev":4},"8.57",137,{"version":66,"cve_count":67,"kev_count":11,"has_kev":4},"8.58",128,{"version":69,"cve_count":70,"kev_count":16,"has_kev":17},"8.59",86,{"version":72,"cve_count":52,"kev_count":16,"has_kev":17},"8.60",{"version":74,"cve_count":75,"kev_count":16,"has_kev":17},"8.61",15,{"version":77,"cve_count":78,"kev_count":16,"has_kev":17},"8.62",5,{"version":80,"cve_count":11,"kev_count":16,"has_kev":17},"9.1.00","Peoplesoft Enterprise Peopletools by Oracle is a technology product with 25 tracked versions and 345 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},{"version":23,"cve_count":24,"kev_count":16,"has_kev":17},{"version":26,"cve_count":27,"kev_count":16,"has_kev":17},{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},{"version":32,"cve_count":33,"kev_count":16,"has_kev":17},{"version":35,"cve_count":33,"kev_count":16,"has_kev":17},{"version":37,"cve_count":33,"kev_count":16,"has_kev":17},{"version":39,"cve_count":33,"kev_count":16,"has_kev":17},{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},{"version":44,"cve_count":45,"kev_count":16,"has_kev":17},{"version":47,"cve_count":45,"kev_count":16,"has_kev":17},{"version":49,"cve_count":45,"kev_count":16,"has_kev":17},{"version":51,"cve_count":52,"kev_count":16,"has_kev":17},{"version":54,"cve_count":55,"kev_count":16,"has_kev":17},{"version":57,"cve_count":58,"kev_count":16,"has_kev":17},{"version":60,"cve_count":61,"kev_count":11,"has_kev":4},{"version":63,"cve_count":64,"kev_count":11,"has_kev":4},{"version":66,"cve_count":67,"kev_count":11,"has_kev":4},{"version":69,"cve_count":70,"kev_count":16,"has_kev":17},{"version":72,"cve_count":52,"kev_count":16,"has_kev":17},{"version":74,"cve_count":75,"kev_count":16,"has_kev":17},{"version":77,"cve_count":78,"kev_count":16,"has_kev":17},{"version":80,"cve_count":11,"kev_count":16,"has_kev":17},[109,117,124,130,137,142,147,152,157,163],{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":114,"severity":115,"isKev":17,"epssScore":116},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":118,"description":119,"publishedDate":120,"cvssScore":121,"cvssVersion":114,"severity":122,"isKev":4,"epssScore":123},"CVE-2019-2725","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2019-04-26",9.8,"Critical",0.99977,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":114,"severity":115,"isKev":17,"epssScore":129},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,0.99215,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":134,"cvssVersion":114,"severity":135,"isKev":17,"epssScore":136},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",7.5,"High",0.9194,{"cveId":138,"description":139,"publishedDate":140,"cvssScore":121,"cvssVersion":114,"severity":122,"isKev":17,"epssScore":141},"CVE-2019-2729","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2019-06-19",0.8883,{"cveId":143,"description":144,"publishedDate":145,"cvssScore":121,"cvssVersion":114,"severity":122,"isKev":17,"epssScore":146},"CVE-2021-3711","In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).","2021-08-24",0.87816,{"cveId":148,"description":149,"publishedDate":150,"cvssScore":128,"cvssVersion":114,"severity":115,"isKev":17,"epssScore":151},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":153,"description":154,"publishedDate":155,"cvssScore":134,"cvssVersion":114,"severity":135,"isKev":17,"epssScore":156},"CVE-2021-22883","Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.","2021-03-03",0.77385,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":161,"cvssVersion":114,"severity":115,"isKev":17,"epssScore":162},"CVE-2021-21345","XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.","2021-03-23",5.8,0.72324,{"cveId":164,"description":165,"publishedDate":166,"cvssScore":134,"cvssVersion":114,"severity":135,"isKev":17,"epssScore":167},"CVE-2021-34798","Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16",0.64509,[169],{"cveId":118,"description":119,"publishedDate":120,"cvssScore":121,"severity":122,"isKev":4,"epssScore":123,"cisaVulnName":170,"cisaDateAdded":171,"cisaShortDescription":172,"cisaRequiredAction":173},"Oracle WebLogic Server, Injection","2022-01-10","Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).","Apply updates per vendor instructions.",{"title":175,"metaDescription":176,"keywords":177,"structuredData":178},"Peoplesoft Enterprise Peopletools by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Peoplesoft Enterprise Peopletools by Oracle covering 25 versions with 345 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Peoplesoft Enterprise Peopletools vulnerabilities, Peoplesoft Enterprise Peopletools security, Peoplesoft Enterprise Peopletools CVE, Oracle Peoplesoft Enterprise Peopletools, Peoplesoft Enterprise Peopletools threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Peoplesoft Enterprise Peopletools KEV, Peoplesoft Enterprise Peopletools exploited vulnerabilities",{"@context":179,"@type":180,"name":181,"description":176,"url":182,"manufacturer":183,"applicationCategory":187,"softwareVersion":188,"mainEntity":189},"https:\u002F\u002Fschema.org","SoftwareApplication","Peoplesoft Enterprise Peopletools","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fpeoplesoft_enterprise_peopletools",{"@type":184,"name":185,"url":186},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","25 versions tracked",{"@type":190,"name":191,"description":192,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Peoplesoft Enterprise Peopletools Security Vulnerabilities","Security vulnerabilities affecting Peoplesoft Enterprise Peopletools by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":194,"apiVersion":195},"2026-10-19T13:05:22.254Z","3.0",[],{"rows":198,"total":11,"capped":17,"failed":16},[199],{"cveId":118,"name":170,"severity":122,"cvss":121,"added":171,"epss":123,"published":200,"ranges":201,"checked":4,"hits":202,"covers":17},"2019-04-26T19:29:00.463",[60,63,66],[]]