Oracle PeopleSoft Supply Chain Management Eprocurement vulnerabilities

2 CVEs affecting Oracle PeopleSoft Supply Chain Management Eprocurement, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-0680, published 2016-04-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0412, published 2016-01-21. Low severity, CVSS 3.5. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the PeopleSoft Enterprise SCM eProcurement component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect integrity via unknown vectors…
CVE-2016-0680, published 2016-04-21. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors…