CVE-2017-10287

CVE-2017-10287 affects Oracle PeopleSoft Enterprise FSCM, Strategic Sourcing subcomponent, version 9.2. A low-privilege, network-accessible (HTTP) attacker can obtain unauthorized read access to a subset of FSCM data. The description provides no further root-cause details. CVSS 3.0 base score is ...

CVE-2017-3524

CVE-2017-3524 affects Oracle PeopleSoft Enterprise SCM Strategic Sourcing, subcomponent Bidder Registration, version 9.2. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the SCM Strategic Sourcing data, potentially enabling unauthorized creation, dele...

CVE-2017-10018

CVE-2017-10018 affects Oracle PeopleSoft Enterprise FSCM, subcomponent Strategic Sourcing (version 9.2). The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to potentially perform unauthorized update/insert/delete operations on FSCM data, with a CVSS v3.0 base score ...

CVE-2018-2702

CVE-2018-2702 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise FSCM component (subcomponent: Strategic Sourcing), version 9.2. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to access confidential data or data the attacker can access within ...