CVE-2016-0591

2016-01-2103:02:20

[email protected]

web.nvd.nist.gov

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

AI Score

5.2

Confidence

Low

EPSS

0.001

Percentile

36.5%

JSON

Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supplier Change.

Affected configurations

Nvd

Node

oraclepeoplesoft_supply_chain_management_purchasingMatch9.1

oraclepeoplesoft_supply_chain_management_purchasingMatch9.2

VendorProductVersionCPE
oraclepeoplesoft_supply_chain_management_purchasing9.1cpe:2.3:a:oracle:peoplesoft_supply_chain_management_purchasing:9.1:*:*:*:*:*:*:*
oraclepeoplesoft_supply_chain_management_purchasing9.2cpe:2.3:a:oracle:peoplesoft_supply_chain_management_purchasing:9.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	peoplesoft_supply_chain_management_purchasing	9.1	cpe:2.3:a:oracle:peoplesoft_supply_chain_management_purchasing:9.1:::::::*
oracle	peoplesoft_supply_chain_management_purchasing	9.2	cpe:2.3:a:oracle:peoplesoft_supply_chain_management_purchasing:9.2:::::::*