Vulnerabilities

TI-2026-43849 CVE-2026-61205 · GHSA-v5r8-j7hf-mg66

Improper access control in Oracle PeopleSoft Enterprise SCM Purchasing

MEDIUM 42

Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00328 Published 2026-07-21 No fix listed CWE-284

TI-2026-26584 CVE-2026-34295 · GHSA-c9q5-q8r3-8m2c

LOW 28

Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00261 Published 2026-04-21 No fix listed CWE-284

TI-2025-15521 CVE-2025-21561 · GHSA-4qxc-98vx-fp5g

LOW 24

Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00292 Published 2025-01-21 No fix listed CWE-863

TI-2020-02605 CVE-2020-2906 · GHSA-4482-3457-4p5j

LOW 31

Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Change).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0127 Published 2020-04-15 No fix listed

TI-2020-02598 CVE-2020-2899 · GHSA-4qgw-9x4q-fwqx

LOW 23

Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.007 Published 2020-04-15 No fix listed

TI-2019-02432 CVE-2019-2899 · GHSA-q54x-xrq8-px2p

LOW 14

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: OAM).

CVSS 3.1LOW 2.4 Network High privileges User interaction EPSS 0.00882 Published 2019-10-16 No fix listed

TI-2018-01990 CVE-2018-2671 · GHSA-89rp-hm3m-c2p3

LOW 32

Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01476 Published 2018-01-18 No fix listed

TI-2017-02717 CVE-2017-3521 · GHSA-w36v-gvmf-qg5c

LOW 34

Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration).

CVSS 3.0MEDIUM 6.5 Network High privileges No interaction EPSS 0.01718 Published 2017-04-24 No fix listed