CVE-2025-21561

The CVE-2025-21561 entry concerns Oracle PeopleSoft, affecting the PeopleSoft Enterprise SCM Purchasing (component: Purchasing) in version 9.2. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to perform unauthorized data updates/inserts/deletes and read access to a su...

CVE-2019-2899

CVE-2019-2899 affects Oracle JDeveloper and ADF (OAM component) in Oracle Fusion Middleware. Affected versions: 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, 12.2.1.3.0. The vulnerability is due to insufficient access control in OAM, allowing a high-privilege attacker with network access via HTTP to compro...

CVE-2020-2906

CVE-2020-2906 affects Oracle PeopleSoft, specifically the PeopleSoft Enterprise SCM Purchasing component (Supplier Change) version 9.2. The vulnerability allows a low-privilege, unauthenticated attacker with network access over HTTP to gain unauthorized access to data within PeopleSoft SCM Purcha...

CVE-2018-2671

The CVE-2018-2671 entry concerns Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise SCM Purchasing component (Supplier Registration subcomponent). Affected is version 9.2. The vulnerability is exploitable by a low-privileged attacker over a network via HTTP, potentially leading to...

CVE-2020-2899

CVE-2020-2899 affects Oracle PeopleSoft’s PeopleSoft Enterprise SCM Purchasing, specifically the Purchasing component in version 9.2. The vulnerability allows a high-privilege attacker who can access the system over HTTP, with user interaction required, to potentially perform unauthorized updates...

CVE-2017-3521

CVE-2017-3521 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise SCM Purchasing component (Supplier Registration) on version 9.2. The vulnerability is described as exploitable over HTTP by a high-privilege attacker with network access, enabling unauthorized creation, delet...

CVE-2026-34295

CVE-2026-34295 pertains to Oracle PeopleSoft Enterprise SCM Purchasing (component: Buying/Purchasing) on version 9.2. A vulnerability allows a low-privileged attacker with network access via HTTP to potentially access sensitive data or otherwise gain full access to available PeopleSoft SCM Purcha...

CVE-2026-61205

CVE-2026-61205 affects Oracle PeopleSoft 9.2 SCM Purchasing (component: Purchasing). The vulnerability allows an unauthenticated attacker over HTTP to compromise PeopleSoft SCM Purchasing, enabling unauthorized creation, deletion or modification of data, and unauthorized read access to a subset o...