Known vulnerabilities in PeopleSoft Enterprise SCM eProcurement

Vendor: Oracle
Software: PeopleSoft Enterprise SCM eProcurement
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_scm_eprocurement:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise SCM eProcurement PeopleSoft Enterprise SCM eProcurement is affected by 6 known vulnerabilities: 5 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121849 - Out-of-bounds read
CVE-2019-2519		 CWE-125 Medium
No
No
 - 24.12.2024 SB2019011546
#VU52584 - Improper input validation
CVE-2021-2220		 CWE-20 Medium
No
No
 - 26.04.2021 SB2021042612
#VU28738 - Out-of-bounds read
CVE-2019-3001		 CWE-125 Medium
No
No
 - 05.06.2020 SB2019101530
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU38041 - Improper input validation
CVE-2017-10368		 CWE-20 Medium
No
No
 - 19.10.2017 SB2017101948
#VU38530 - Improper input validation
CVE-2017-10134		 CWE-20 Medium
No
No
 - 08.08.2017 SB2017080847