CVE-2017-10368

https://notcve.org/view.php?id=CVE-2017-10368

19 Oct 2017 — Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). Supported versions that are affected are 9.1.00 and 9.2.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise SCM eProcurement, atta... • http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html •