Peoplesoft Enterprise Scm Manufacturing
Monthly
Unauthorized data compromise in Oracle PeopleSoft Enterprise SCM Manufacturing 9.2 (Security component) lets a remote, unauthenticated attacker read, create, modify, or delete all data accessible to the application over HTTPS. Rated CVSS 3.1 7.4 with high confidentiality and integrity impact but no availability impact, and flagged by Oracle with an Authentication Bypass characteristic. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; exploitation is rated high-complexity by Oracle.
Unauthorized data disclosure in Oracle PeopleSoft Enterprise SCM Manufacturing 9.2 (Security component) allows a remote, unauthenticated attacker with HTTP network access to read critical manufacturing and supply-chain data. Oracle rates the flaw as easily exploitable with a CVSS 3.1 base score of 7.5 (confidentiality-only impact), and vendor tagging associates it with an authentication-bypass class of issue. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthorized data compromise in Oracle PeopleSoft Enterprise SCM Manufacturing 9.2 (Security component) lets a remote, unauthenticated attacker read, create, modify, or delete all data accessible to the application over HTTPS. Rated CVSS 3.1 7.4 with high confidentiality and integrity impact but no availability impact, and flagged by Oracle with an Authentication Bypass characteristic. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; exploitation is rated high-complexity by Oracle.
Unauthorized data disclosure in Oracle PeopleSoft Enterprise SCM Manufacturing 9.2 (Security component) allows a remote, unauthenticated attacker with HTTP network access to read critical manufacturing and supply-chain data. Oracle rates the flaw as easily exploitable with a CVSS 3.1 base score of 7.5 (confidentiality-only impact), and vendor tagging associates it with an authentication-bypass class of issue. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.