VulnerabilityModified

CVE-2016-0590

Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors.

MEDIUM 4.3EPSS 1.45%

Does this matter?

Lower severity and a low EPSS score (1.45%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors.

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 1.45% probability · 72th percentile
CISA KEV: Not listed
Affected: oracle/peoplesoft supply chain management order management
Source: secalert_us@oracle.com

References

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlVendor Advisory
http://www.securitytracker.com/id/1034720
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlVendor Advisory
http://www.securitytracker.com/id/1034720

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.