CVE-2017-10368

CVE-2017-10368 affects Oracle PeopleSoft Enterprise SCM eProcurement (Manage Requisition Status) in versions 9.1.00 and 9.2.00. The vulnerability is exploitable over HTTP by an unauthenticated attacker and requires user interaction; it can lead to unauthorized update/insert/delete and read access...

CVE-2021-2220

CVE-2021-2220 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: Manage Requisition Status) in version 9.2. The underlying issue is described as an input validation error that could allow a low-privilege, network-accessible attacker (HTTP) to update/insert/delete data and read addi...

CVE-2019-3001

CVE-2019-3001 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: eProcurement) version 9.2. The vulnerability allows an unauthenticated attacker with network access over HTTP to read data from the affected SCM eProcurement component. The CVSS v3.1 base score is 5.3 (Confidentiality...

CVE-2017-10134

CVE-2017-10134 affects Oracle PeopleSoft Enterprise FSCM (subcomponent: eProcurement) on version 9.2. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise FSCM, requiring user interaction. Successful exploitation can lead to unauthorized update/insert/delet...

CVE-2016-5467

CVE-2016-5467 affects Oracle PeopleSoft Products 9.1 and 9.2 within the PeopleSoft Enterprise FSCM component, specifically the eProcurement area. The connected records indicate an unspecified vulnerability that allows remote authenticated users to affect confidentiality and integrity, with potent...

CVE-2018-2731

CVE-2018-2731 affects Oracle PeopleSoft Enterprise SCM eProcurement (Manage Requisition Status) in versions 9.1 and 9.2. The issue enables a low-privilege, network-accessing attacker over HTTP to perform unauthorized read, update, insert, or delete actions on data within that subcomponent, per CV...

CVE-2026-61207

Vulnerability CVE-2026-61207 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: Manage Requisition Status) in version 9.2. An unauthenticated attacker with network access via HTTP can compromise the SCM eProcurement, with potential scope impact to additional products and outcomes i...