Oracle PeopleSoft vulnerabilities

In PeopleSoft Enterprise FIN Common Objects Argentina (part of Oracle PeopleSoft) version 9.1, an easily exploitable vulnerability allows an unauthenticated attacker with access to the physical communication segment. Attacks may significantly impact additional products (scope change) and result in unauthorized access to critical data and modification capabilities.

Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (part of Oracle PeopleSoft) version 9.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly read and modify critical data. CVSS 7.4.

Vulnerability in PeopleSoft Enterprise SCM Manufacturing (part of Oracle PeopleSoft) version 9.2. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to unauthorizedly read and modify critical data. CVSS 7.4.

Vulnerability in PeopleSoft Enterprise SCM Purchasing (part of Oracle PeopleSoft) version 9.2. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly modify critical data and read a subset of data. CVSS 8.2.

Vulnerability in Oracle PeopleSoft Enterprise CS Student Records (Research Tracking component) version 9.2.38. Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.

Vulnerability in PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.

Vulnerability in PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.

Vulnerability in PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTPS.

Vulnerability in PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTPS.

Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft, component eProcurement. Affects version 9.1. It is difficult to exploit, but an unauthenticated attacker can remotely take over the system via HTTP.

Vulnerability in PeopleSoft Enterprise CS Campus Community product. An unauthenticated attacker with network access via HTTP can gain complete access to all data and unauthorized update, insert, or delete access to some data.

Vulnerability in Oracle PeopleSoft Enterprise CS Campus Community (component: Security). Affected version is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise the system. Successful attack can result in unauthorized access to critical data or full access to all accessible data, as well as unauthorized update, insert or delete access to some data.

Vulnerability in PeopleSoft Enterprise CS Financial Aid of Oracle PeopleSoft (component: Commonline Loans). Affects version 9.2.38. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.

Vulnerability in PeopleSoft Enterprise FIN Common Objects (part of Oracle PeopleSoft, component: Security) version 9.2. A low-privileged attacker with local access, after user interaction, can modify critical data.

Vulnerability in Oracle PeopleSoft Enterprise FIN Staffing Front Office (component: Staffing Front Office). Affected version is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise the system. Successful attack can result in unauthorized creation, deletion or modification of critical data or all accessible data.