CVE-2016-0680

Published: Apr 21, 2016Modified: May 6, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Services Procurement.

Affected (2)

Products: Oracle: Peoplesoft Supply Chain Management Eprocurement

Oracle

1 product

Peoplesoft Supply Chain Management Eprocurement

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Peoplesoft Supply Chain Management Eprocurement	Version 9.1
Oracle Peoplesoft Supply Chain Management Eprocurement	Version 9.2

References (4)

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securitytracker.com/id/1035610

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1035610

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.