High WID-SEC-2025-0812 4 CVEs

Oracle PeopleSoft: Mehrere Schwachstellen

Published Apr 15, 2025 · Updated Apr 15, 2025 · de-DE

Vendor: Oracle Product: PeopleSoft Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle PeopleSoft ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle PeopleSoft ist eine ERP Anwendung.

Vulnerabilities 4

High 8.1

CVE-2025-30735

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Page …

Oracle PeopleSoft Enterprise CC Common Application Objects

Apr 15, 2025
High 7.5

CVE-2023-52428

Denial of Service in Connect2id Nimbus JOSE+JWT

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

druid thingsboard-tb-node thingsboard-tb-mqtt-transport tez Wolfi Maven

Feb 11, 2024
Medium 5.4

CVE-2025-30697

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Suppo…

Oracle PeopleSoft Enterprise PeopleTools

Apr 15, 2025
Medium 5.4

CVE-2025-30713

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job …

Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager

Apr 15, 2025

Revision history

2025-04-15 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - April 2025 - Appendix Oracle PeopleSoft vom 2025-04-15
https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixPS