Oracle PeopleSoft Supply Chain Management Purchasing vulnerabilities

2 CVEs affecting Oracle PeopleSoft Supply Chain Management Purchasing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21971, published 2026-01-20.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-0591, published 2016-01-21. Medium severity, CVSS 5.5. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via…
• CVE-2026-21971, published 2026-01-20. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable vulnerability…