Oracle PeopleSoft Enterprise SCM Purchasing Component Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability exists in the PeopleSoft Enterprise SCM Purchasing product, specifically in version 9.2. This easily exploitable issue allows a low-privileged attacker with network access via HTTP to compromise the application. Successful exploitation can lead to unauthorized read access to certain data, as well as unauthorized updates, inserts, or deletions of accessible data within the PeopleSoft Enterprise SCM Purchasing module.

Impact

Exploitation of this vulnerability could result in unauthorized access to read, update, insert, or delete data within the PeopleSoft Enterprise SCM Purchasing application.