Known vulnerabilities in PeopleSoft Enterprise SCM Purchasing

Vendor: Oracle
Software: PeopleSoft Enterprise SCM Purchasing
Software CPE: cpe:2.3:a:oracle:peoplesoft_enterprise_scm_purchasing:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PeopleSoft Enterprise SCM Purchasing PeopleSoft Enterprise SCM Purchasing is affected by 7 known vulnerabilities: 6 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126803 - Out-of-bounds read
CVE-2026-34295		 CWE-125 Medium
No
No
 - 22.04.2026 SB20260422112
#VU121748 - Improper input validation
CVE-2026-21971		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120181
#VU103210 - Improper input validation
CVE-2025-21561		 CWE-20 Medium
No
No
 - 22.01.2025 SB2025012214
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU26896 - Improper input validation
CVE-2020-2906		 CWE-20 Medium
No
No
 - 15.04.2020 SB2020042339
#VU26903 - Improper input validation
CVE-2020-2899		 CWE-20 Medium
No
No
 - 15.04.2020 SB2020042339
#VU39123 - Improper input validation
CVE-2017-3521		 CWE-20 Medium
No
No
 - 24.04.2017 SB2017042412