CVE-2017-3570

The CVE-2017-3570 entry concerns Oracle PeopleSoft Enterprise FSCM, specifically the eSettlements subcomponent in version 9.1. The vulnerability is described as allowing a high-privilege attacker with network access via HTTP to compromise data, potentially enabling unauthorized creation, deletion...

CVE-2017-3570

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: eSettlements. The supported version that is affected is 9.1. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Unauthorized Container Shutdown In ServerMigrationCoordinator

Application: Oracle PeopleSoft Versions Affected: PeopleSoft FSCM 9.2 Vendor: Oracle Bug: Missing Authentication for Critical Function Reported: 16.03.2017 Vendor response: 17.03.2017 Date of Public Advisory: 18.07.2017 Reference: Oracle CPU July 2017 Authors: Vahagn Vardanyan ERPScan VULNERABILI...

Anonymous log injection in FSCM

Application: Oracle PeopleSoft Versions Affected: PeopleSoft FSCM 9.2 Vendor: Oracle Bug: Anonymous log injection Reported: 16.03.2017 Vendor response: 17.03.2017 Date of Public Advisory: 18.07.2017 Reference: Oracle CPU July 2017 Authors: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class:...

CVE-2016-5467

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to eProcurement...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to eProcurement...

CVE-2016-5467

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to eProcurement...

CVE-2016-5467

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to eProcurement...

CVE-2016-5467

CVE-2016-5467 affects Oracle PeopleSoft Products 9.1 and 9.2 within the PeopleSoft Enterprise FSCM component, specifically the eProcurement area. The connected records indicate an unspecified vulnerability that allows remote authenticated users to affect confidentiality and integrity, with potent...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise FSCM Component

Oracle PeopleSoft is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. An unspecified...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via vectors related to FIN Resource Management Security...

CVE-2015-4828

CVE-2015-4828 describes an unspecified vulnerability in the PeopleSoft Enterprise FSCM component within Oracle PeopleSoft Products 9.2 , allowing remote authenticated users to affect confidentiality via FIN Resource Management (Security) . The description indicates a vulnerability in the FSCM/FIN...

CVE-2011-2272

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.0, Bundle, 36, 9.1, Bundle, and 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to eProcurement...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.0, Bundle, 36, 9.1, Bundle, and 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to eProcurement...

Oracle PeopleSoft Enterprise远程FSCM漏洞(CVE-2011-2272)

BUGTRAQ ID: 48777 CVE ID: CVE-2011-2272 PeopleSoft企业软件集成多个商务功能，包括人事、客户关系、供求关系、财务等管理。PeopleSoft PeopleTools网关管理Servlet存在信息泄露问题， PeopleSoft的Enterprise PeopleTools在HRMS的实现上存在安全漏洞，远程攻击者可通过'HTTPs'协议利用此漏洞影响eProcurement子组件，非法更新、插入、删除PeopleSoft Enterprise FSCM中的可访问数据，非法读取其子集数据。 Oracle PeopleSoft Enterpri...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle 37, SCM 9.0 Bundle 30, and SCM 9.1 Bundle 4 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-2380

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle 37, SCM 9.0 Bundle 30, and SCM 9.1 Bundle 4 allows local users to affect confidentiality, integrity, and availability via unknown vectors...