CVE-2006-0584
Published Feb 8, 2006The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a d…
Vendor/product archive
peoplesoft / peopletools CVEs
Beta · best-effort8 CVEs tagged to peoplesoft / peopletools — 0 Critical, 1 High, 6 Medium, 1 Low, 0 Unrated.
CVE-2003-0627
Published Dec 31, 2003psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (application crash), possibly via the headername and footername argume…
CVE-2003-0628
Published Dec 15, 2003PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SS…
CVE-2003-0629
Published Dec 15, 2003Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HT…
CVE-2003-0950
Published Dec 15, 2003PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (s…
CVE-2003-0626
Published Nov 13, 2003psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footername arguments.
CVE-2003-0104
Published Mar 18, 2003Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet.
CVE-2002-1252
Published Feb 7, 2003The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML Externa…
Showing 1-8 of 8 CVEsPage 1 of 1