Peoplesoft Enterprise Scm Mobile Inventory Management
Monthly
Privilege-scoped data compromise in Oracle PeopleSoft Enterprise SCM Mobile Inventory Management 9.2 (Security component) allows a low-privileged, authenticated attacker with local logon to the hosting infrastructure to read, create, delete, or modify all data accessible to the application, with a scope change that can significantly impact additional connected PeopleSoft products. Oracle rates this CVSS 3.1 7.5, but exploitation is explicitly rated difficult (AC:H), and there is no public exploit identified at time of analysis nor CISA KEV listing. The Oracle-supplied 'Authentication Bypass' tag suggests the flaw may let an attacker escalate beyond their assigned authorization boundary, though Oracle's terse advisory does not detail the mechanism.
Privilege-scoped data compromise in Oracle PeopleSoft Enterprise SCM Mobile Inventory Management 9.2 (Security component) allows a low-privileged, authenticated attacker with local logon to the hosting infrastructure to read, create, delete, or modify all data accessible to the application, with a scope change that can significantly impact additional connected PeopleSoft products. Oracle rates this CVSS 3.1 7.5, but exploitation is explicitly rated difficult (AC:H), and there is no public exploit identified at time of analysis nor CISA KEV listing. The Oracle-supplied 'Authentication Bypass' tag suggests the flaw may let an attacker escalate beyond their assigned authorization boundary, though Oracle's terse advisory does not detail the mechanism.