Vulnerability in Oracle PeopleSoft SCM eProcurement Affects Multiple Versions

CVE-2017-10368

Summary

An exploitable security flaw exists in the eProcurement component of Oracle PeopleSoft Enterprise SCM. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Although successful exploitation requires human interaction from a third party, it poses significant risks including unauthorized modifications, deletions, or even reading of sensitive data within the PeopleSoft environment. As these vulnerabilities affect core functionalities, they may extend their impact to other integrated applications.

References