Vulnerability in PeopleSoft Enterprise SCM eProcurement by Oracle
CVE-2019-3001

5.3MEDIUM

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Scm Eprocurement
Vendor
CVE Published:
16 October 2019

What is CVE-2019-3001?

A security vulnerability exists in Oracle's PeopleSoft Enterprise SCM eProcurement product. This issue allows unauthenticated attackers with network access via HTTP to gain unauthorized read access to sensitive data within the affected system. The vulnerability affects version 9.2 and can be exploited easily, potentially exposing critical information accessible to end-users. Ensuring timely updates and security measures are crucial to safeguard against this exploit.

Affected Version(s)

PeopleSoft Enterprise SCM eProcurement 9.2

References

http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.