GCVE-110-NCSC-2025-23

Weaknesses (CWE)

CWE-125Out-of-bounds ReadCWE-222Truncation of Security-relevant InformationCWE-404Improper Resource Shutdown or ReleaseCWE-276Incorrect Default PermissionsCWE-440Expected Behavior ViolationCWE-606Unchecked Input for Loop ConditionCWE-416Use After FreeCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-1333Inefficient Regular Expression ComplexityCWE-400Uncontrolled Resource ConsumptionCWE-275-CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-94Improper Control of Generation of Code ('Code Injection')CWE-122Heap-based Buffer OverflowCWE-770Allocation of Resources Without Limits or ThrottlingCWE-670Always-Incorrect Control Flow ImplementationCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-669Incorrect Resource Transfer Between SpheresCWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Risk Scores

CVSS 3.1

7.5/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
oracle	peoplesoft_enterprise_cc_common_application_objects	—	—
oracle	peoplesoft_enterprise_peopletools	—	—
oracle	peoplesoft_enterprise_hcm_human_resources	—	—
oracle	peoplesoft_enterprise_scm_purchasing	—	—
oracle	peoplesoft_enterprise_fin_esettlements	—	—
oracle	peoplesoft_enterprise_hcm_shared_components	—	—
oracle	peoplesoft_enterprise_fin_cash_management	—	—

References

advisory

Browse GCVE Records

73,873 records in the GCVE database · Updated July 20, 2026

No matching records found.