CVE-2014-2495

Published: Jul 17, 2014Modified: May 6, 2026

2.3

Vector

AV:A/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 4.4 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Purchasing.

Affected (2)

Products: Oracle: Peoplesoft Products

Oracle

1 product

Peoplesoft Products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Peoplesoft Products	Version 9.1
Oracle Peoplesoft Products	Version 9.2

References (10)

http://seclists.org/fulldisclosure/2014/Dec/23

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securityfocus.com/archive/1/534161/100/0/threaded

Source: secalert_us@oracle.com

http://www.securitytracker.com/id/1030586

Source: secalert_us@oracle.com

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Source: secalert_us@oracle.com

http://seclists.org/fulldisclosure/2014/Dec/23