CVE-2017-3525

Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products subcomponent: Usability. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-3571

Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3522

The CVE-2017-3522 issue affects Oracle PeopleSoft Enterprise SCM eSupplier Connection (Vendor subcomponent) on version 9.2. It is a remote vulnerability exploitable via HTTP that could allow a high-privilege attacker to read, modify, or delete data within the eSupplier Connection, per CVSSv3.0 ba...

CVE-2017-3521

Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products subcomponent: Supplier Registration. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2017-3521

CVE-2017-3521 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise SCM Purchasing component (Supplier Registration) on version 9.2. The vulnerability is described as exploitable over HTTP by a high-privilege attacker with network access, enabling unauthorized creation, delet...

PT-2017-15960

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Strategic Sourcing. Successful attacks can result in...

CVE-2017-3525: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products subcomponent: Usability. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSo...

PT-2017-15958

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eSupplier Connection version 9.2 Description The issue allows a high privileged attacker with network access via HTTP to compromise the PeopleSoft Enterprise SCM eSupplier Connection, resulting in unauthorized access ...

PT-2017-16004

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eBill Payment version 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eBill Payment. Successful attacks can result in unauthorized...

PT-2017-15961

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM Service Procurement version 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Service Procurement. Successful attacks can result in...

PT-2017-15957

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM Purchasing version 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful attacks can result in unauthorized creation,...

Oracle PeopleSoft Enterprise SCM eBill Payment Remote Vulnerability

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise SCM eBill Payment is one of the electronic billing display solution...

CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

Design/Logic Flaw

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

CVE-2016-6299

CVE-2016-6299 affects the scm plug-in in mock, where crafted spec files can bypass the chroot protection and grant the attacker root privileges. This is a local-type vulnerability with high impact (C/H/I/A) per CVSS. Fedora advisories indicate a security fix was released for this CVE; other sourc...

CVE-2016-6299: Undefined Security Weakness

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

CVE-2015-2263: Undefined Security Weakness

Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global read permissions for files in its configuration directory when starting YARN NodeManager, which allows local users to obtain sensitive information by reading the files, as...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...