Oracle PeopleSoft Enterprise Scm Strategic Sourcing vulnerabilities

4 CVEs affecting Oracle PeopleSoft Enterprise Scm Strategic Sourcing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-2702, published 2018-01-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-10287, published 2017-10-19. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable…
CVE-2017-3524, published 2017-04-24. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component of Oracle PeopleSoft Products (subcomponent: Bidder Registration). The supported version that is affected is 9.2. Easily…
CVE-2018-2702, published 2018-01-18. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable…
CVE-2017-10018, published 2017-08-08. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable…