Oracle PeopleSoft Enterprise Human Capital Management vulnerabilities

2 CVEs affecting Oracle PeopleSoft Enterprise Human Capital Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-2752, published 2018-04-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-3854, published 2007-07-18. Medium severity, CVSS 5.5. EPSS: 2.5% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing…
CVE-2018-2752, published 2018-04-19. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows…