Peoplesoft Enterprise Scm Inventory
Monthly
Unauthenticated data compromise in Oracle PeopleSoft Enterprise SCM Inventory 9.2 (Security component) lets a remote attacker reach the application over HTTP and read all data the module can access, plus perform limited unauthorized updates, inserts or deletes. Oracle rates it CVSS 3.1 8.2 and the intelligence tags it as an authentication-bypass class issue, meaning no valid credentials or user interaction are needed. No public exploit identified at time of analysis and it is not on CISA KEV, but the low-complexity, network-facing, no-privilege profile makes it a high-priority patch for Oracle ERP operators.
Unauthorized data disclosure in Oracle PeopleSoft Enterprise SCM Inventory 9.2 (Security component) allows a remote, unauthenticated attacker to reach sensitive data over HTTPS without any user interaction. Oracle rates the flaw easily exploitable and it is tagged as an authentication bypass, meaning an attacker can obtain read access to all data accessible to the SCM Inventory application. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and lack of authentication make it a priority patch in the July 2026 Oracle Critical Patch Update.
Unauthenticated data compromise in Oracle PeopleSoft Enterprise SCM Inventory 9.2 (Security component) lets a remote attacker reach the application over HTTP and read all data the module can access, plus perform limited unauthorized updates, inserts or deletes. Oracle rates it CVSS 3.1 8.2 and the intelligence tags it as an authentication-bypass class issue, meaning no valid credentials or user interaction are needed. No public exploit identified at time of analysis and it is not on CISA KEV, but the low-complexity, network-facing, no-privilege profile makes it a high-priority patch for Oracle ERP operators.
Unauthorized data disclosure in Oracle PeopleSoft Enterprise SCM Inventory 9.2 (Security component) allows a remote, unauthenticated attacker to reach sensitive data over HTTPS without any user interaction. Oracle rates the flaw easily exploitable and it is tagged as an authentication bypass, meaning an attacker can obtain read access to all data accessible to the SCM Inventory application. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and lack of authentication make it a priority patch in the July 2026 Oracle Critical Patch Update.