113 matches found
CVE-2021-2220
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
Code injection
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2021-2220
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2021-2220
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2021-2220
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2021-2220
CVE-2021-2220 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: Manage Requisition Status) in version 9.2. The underlying issue is described as an input validation error that could allow a low-privilege, network-accessible attacker (HTTP) to update/insert/delete data and read addi...
PT-2021-3022
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement version 9.2 Description The issue is related to insufficient input validation in the Manage Requisition Status component. It allows a low-privileged attacker with network access via HTTP to compromise...
The vulnerability of the eProcurement sub-component of the PeopleSoft Enterprise SCM eProcurement package from the Oracle PeopleSoft products allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the eProcurement sub-component of the PeopleSoft Enterprise SCM eProcurement package from the Oracle PeopleSoft products is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...
Oracle PeopleSoft Products PeopleSoft Enterprise SCM eProcurement Component Information Disclosure Vulnerability
Oracle PeopleSoft Products is a set of Oracle's Oracle enterprise human capital management solutions. The product provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise SCM eProcurement is one of the online procurement component. An...
CVE-2019-3001
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: eProcurement. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM...
CVE-2019-3001
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: eProcurement. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM...
CVE-2019-3001
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: eProcurement. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM...
CVE-2019-3001
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: eProcurement. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM...
CVE-2019-3001
CVE-2019-3001 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: eProcurement) version 9.2. The vulnerability allows an unauthenticated attacker with network access over HTTP to read data from the affected SCM eProcurement component. The CVSS v3.1 base score is 5.3 (Confidentiality...
PT-2019-3661
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement version 9.2 Description The issue is related to inadequate access control in the eProcurement component of PeopleSoft Enterprise SCM eProcurement, allowing an unauthenticated attacker with network access...
CVE-2019-3001: Undefined Security Weakness
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: eProcurement. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM...
Oracle PeopleSoft Enterprise SCM eProcurement CVE-2019-3001 Remote Security Vulnerability
Description Oracle PeopleSoft Enterprise SCM eProcurement is prone to a remote security vulnerability. These vulnerabilities can be exploited over the 'HTTP' protocol. These vulnerabilities affect the following supported versions: 9.2 Technologies Affected Oracle PeopleSoft Enterprise SCM...
The vulnerability of the PeopleSoft Enterprise SCM eProcurement (Manage Requisition Status) component of the Oracle PeopleSoft products allows a perpetrator to gain unauthorized access to protected data.
The vulnerability of the PeopleSoft Enterprise SCM eProcurement Manage Requisition Status component of the Oracle PeopleSoft products is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data using the...
CVE-2019-2519
Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products subcomponent: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
Code injection
Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products subcomponent: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...