Vulnerabilidades do Oracle Peoplesoft Enterprise Fin Project Costing
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Peoplesoft Enterprise Fin Project Costing: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:peoplesoft_enterprise_fin_project_costing
CVE-2026-60600
Alta · 7.8
CWE-306 21/07/2026
Missing Authentication for Critical Function em Oracle Peoplesoft Enterprise Fin Project Costing
Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Project Costing executes to compromise PeopleSoft Enterprise FIN Project Costing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Project Costing. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
CVE-2026-34306
Média · 6.5
CWE-284 21/04/2026
Improper Access Control em Oracle Peoplesoft Enterprise Fin Project Costing
Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Project Costing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Project Costing accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).