peoplesoft_enterprise_hcm_human_resources

productNL

cpe:2.3:a:oracle:peoplesoft_enterprise_hcm_human_resources:9.2:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical2high7medium0low

updated 2026-10-27

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	—
CVE-2024-26308US	medium5.5	0.90% (59th)	Exploit	no fix	2024-02-19	—
CVE-2024-2511US	—	52.4% (99th)	—	no fix	2024-04-08	—
CVE-2024-0727US	medium5.5	3.19% (88th)	—	no fix	2024-01-26	—
CVE-2024-22019US	high7.5	3.17% (88th)	—	no fix	2024-02-20	—
CVE-2024-4741US	—	2.93% (87th)	—	no fix	2024-11-13	—
CVE-2023-28756US	medium5.3	2.45% (84th)	—	no fix	2023-03-31	—
CVE-2024-29025US	—	1.38% (72nd)	—	no fix	2024-03-25	—
CVE-2024-4603US	—	1.13% (66th)	—	no fix	2024-05-16	—
CVE-2024-28849US	—	1.04% (64th)	—	no fix	2024-03-14	—
CVE-2024-26130US	high7.5	0.83% (57th)	—	no fix	2024-02-21	—
CVE-2024-0397US	—	0.81% (57th)	—	no fix	2024-06-17	—
CVE-2023-42503US	medium5.5	0.60% (49th)	—	no fix	2023-09-14	—
CVE-2023-37920US	critical9.8OT elevated	0.57% (47th)	—	no fix	2023-07-25	—
CVE-2024-0232US	medium5.5	0.38% (32nd)	—	no fix	2024-01-16	—
CVE-2024-21154US	—	0.38% (31st)	—	no fix	2024-07-16	—
CVE-2024-0450US	—	0.34% (27th)	—	no fix	2024-03-19	—
CVE-2024-21158US	medium6.4	0.32% (25th)	—	no fix	2024-07-16	—
CVE-2024-21180US	—	0.30% (22nd)	—	no fix	2024-07-16	—
CVE-2024-21122US	—OT elevated	0.27% (19th)	—	no fix	2024-07-16	—
CVE-2024-21178US	—	0.27% (19th)	—	no fix	2024-07-16	—

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation8 CVEs
CWE-404Improper Resource Shutdown or Release5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-345Insufficient Verification of Data Authenticity2 CVEs
CWE-416Use After Free2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.