Oracle PeopleSoft Enterprise Customer Relationship Management vulnerabilities

3 CVEs affecting Oracle PeopleSoft Enterprise Customer Relationship Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0850, published 2011-04-20.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-3466, published 2005-11-02. High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Enterprise CRM Sales in Oracle 8.81 up to 8.9 has unknown impact and attack vectors, as identified by Oracle Vuln# CRM01.
• CVE-2007-3854, published 2007-07-18. Medium severity, CVSS 5.5. EPSS: 2.5% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing…
• CVE-2011-0850, published 2011-04-20. Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle PeopleSoft Enterprise CRM 8.9 Bundle #41 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Order Capture.