DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Oracle PeopleSoft: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2025-01-21
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle PeopleSoft ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
01
beschreibt (16)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-21563US | —OT erhöht | — | ||
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Run Control Management). The supported version that is affected… | ||||
| CVE-2025-21562US | —OT erhöht | — | ||
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Run Control Management). The supported version that is affected… | ||||
| CVE-2025-21561US | —OT erhöht | — | ||
Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable… | ||||
| CVE-2025-21545US | — | — | ||
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch). Supported versions that are affected are 8.60 and 8.61. Easily exploi… | ||||
| CVE-2025-21539US | —OT erhöht | — | ||
Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The supported version that is affected is 9.2. Easily exploita… | ||||
| CVE-2025-21537US | —OT erhöht | — | ||
Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Easily ex… | ||||
| CVE-2025-21530US | — | — | ||
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.60 and 8.61. Easily e… | ||||
| CVE-2024-7592US | high7.5 | — | ||
There is a LOW severity vulnerability affecting CPython, specifically the
'http.cookies' standard library module.
When parsing cookies that contained backslashes for quoted chara… | ||||
| CVE-2024-22020US | — | — | ||
A security flaw in Node.js allows a bypass of network import restrictions.
By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising syst… | ||||
| CVE-2024-5535US | — | Exploit | ||
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an
empty supported client protocols buffer may cause a crash or memory contents to
be sent to the peer.… | ||||
| CVE-2024-37891US | medium6.5 | — | ||
urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured… | ||||
| CVE-2024-35195US | — | — | ||
Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all s… | ||||
| CVE-2024-27280US | — | — | ||
A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can rea… | ||||
| CVE-2024-29025US | — | — | ||
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `HttpPostRequestDecoder`… | ||||
| CVE-2024-28849US | — | — | ||
follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affected versions follow-redirects only clear… | ||||
| CVE-2020-22218US | high7.5 | — | ||
An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2026-73519 vom 2026-10-09external
- SUSE Security Update SUSE-SU-2025:20065-1 vom 2025-06-04external
- WID-SEC-W-2025-0166 - CSAF Versionself
- WID-SEC-2025-0166 - Portal Versionself
- Oracle Critical Patch Update Advisory - January 2025 - Appendix Oracle PeopleSoft vom 2025-01-21external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan