Oracle PeopleSoft 9.2.23

productDE

cpe:/a:oracle:peoplesoft:9.2.23

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high1medium0low

updated 2026-10-28

vulnerabilities (82)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-61245US	—OT elevated	0.51% (43rd)	—	no fix	2026-07-21	—
CVE-2026-61233US	—OT elevated	0.51% (43rd)	—	no fix	2026-07-21	—
CVE-2026-61235US	—	0.49% (42nd)	—	no fix	2026-07-21	—
CVE-2026-61068US	—	0.49% (42nd)	—	no fix	2026-07-21	—
CVE-2026-61203US	—OT elevated	0.46% (39th)	—	no fix	2026-07-21	—
CVE-2026-61243US	—OT elevated	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-61242US	—	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-61209US	—	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-61076US	—	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-61072US	—	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-60603US	—	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-60602US	—OT elevated	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-60594US	—	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-61244US	—	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-61238US	—	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-61059US	—	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-60606US	—	0.43% (37th)	—	no fix	2026-07-21	—
CVE-2026-61236US	—	0.41% (36th)	—	no fix	2026-07-21	—
CVE-2026-61232US	—	0.41% (36th)	—	no fix	2026-07-21	—
CVE-2026-61088US	—	0.41% (36th)	—	no fix	2026-07-21	—
CVE-2026-61087US	—	0.41% (36th)	—	no fix	2026-07-21	—
CVE-2026-61086US	—	0.41% (36th)	—	no fix	2026-07-21	—
CVE-2026-61085US	—	0.41% (36th)	—	no fix	2026-07-21	—
CVE-2026-61073US	—	0.41% (36th)	—	no fix	2026-07-21	—
CVE-2026-60605US	—OT elevated	0.41% (36th)	—	no fix	2026-07-21	—
CVE-2026-61070US	—	0.41% (35th)	—	no fix	2026-07-21	—
CVE-2026-60613US	—	0.40% (34th)	—	no fix	2026-07-21	—
CVE-2026-47049US	—	0.40% (34th)	—	no fix	2026-07-21	—
CVE-2026-60609US	—	0.39% (33rd)	—	no fix	2026-07-21	—
CVE-2026-61201US	—OT elevated	0.39% (33rd)	—	no fix	2026-07-21	—
CVE-2026-61074US	—OT elevated	0.39% (33rd)	—	no fix	2026-07-21	—
CVE-2026-61237US	—	0.38% (31st)	—	no fix	2026-07-21	—
CVE-2026-47026US	—	0.37% (31st)	—	no fix	2026-07-21	—
CVE-2026-61239US	—OT elevated	0.37% (31st)	—	no fix	2026-07-21	—
CVE-2026-60599US	—	0.36% (30th)	—	no fix	2026-07-21	—
CVE-2026-60667US	—	0.36% (29th)	—	no fix	2026-07-21	—
CVE-2026-60593US	—	0.35% (29th)	—	no fix	2026-07-21	—
CVE-2026-61207US	—	0.35% (29th)	—	no fix	2026-07-21	—
CVE-2026-61089US	—	0.35% (29th)	—	no fix	2026-07-21	—
CVE-2026-60668US	—	0.35% (29th)	—	no fix	2026-07-21	—
CVE-2026-60615US	—	0.35% (29th)	—	no fix	2026-07-21	—
CVE-2026-60610US	—	0.35% (28th)	—	no fix	2026-07-21	—
CVE-2026-61234US	—	0.34% (27th)	—	no fix	2026-07-21	—
CVE-2026-61210US	—	0.34% (27th)	—	no fix	2026-07-21	—
CVE-2026-60597US	—	0.34% (27th)	—	no fix	2026-07-21	—
CVE-2026-60611US	—	0.34% (27th)	—	no fix	2026-07-21	—
CVE-2026-60604US	—OT elevated	0.33% (27th)	—	no fix	2026-07-21	—
CVE-2026-60598US	—	0.33% (27th)	—	no fix	2026-07-21	—
CVE-2026-61205US	—	0.33% (26th)	—	no fix	2026-07-21	—
CVE-2026-61078US	—	0.33% (25th)	—	no fix	2026-07-21	—

showing 50 of 82

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control59 CVEs
CWE-306Missing Authentication for Critical Function14 CVEs
CWE-269Improper Privilege Management10 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs
CWE-287Improper Authentication6 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')5 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-20Improper Input Validation2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)82 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan