Oracle Peoplesoft Enterprise PT PeopleTools 8.58

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.58:*:*:*:*:*:*:*

part: a version: 8.58 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductPeoplesoft Enterprise Pt Peopletools (450a1ddb-5dc3-5c27-820c-61455bab0a9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13956 vulnerable 2026-06-08 05:18:01.621294 Details available
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Published: 2020-12-02T16:20:12.000Z
Updated: 2025-12-01T15:45:49.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12402 vulnerable 2026-06-08 05:12:39.048891 Details available
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.
Published: 2019-08-29T00:00:00.000Z
Updated: 2024-08-04T23:17:39.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10086 vulnerable 2026-06-08 05:12:22.181497 Details available
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Published: 2019-08-20T20:10:15.000Z
Updated: 2024-08-04T22:10:09.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18640 vulnerable 2026-06-08 05:09:11.337559 Details available
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
Published: 2019-12-12T00:00:00.000Z
Updated: 2024-08-05T21:28:55.802Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.