CVE-2017-3522: Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection component of Oracle PeopleSoft Products...

Security readout for executives and security teams

This is a data-access flaw in Oracle PeopleSoft Enterprise SCM eSupplier Connection 9.2. A privileged user who can reach the application over HTTP could read or change critical supplier-management data. The issue is not described as remotely exploitable by anonymous users, but the business impact can be serious where supplier, procurement, or vendor data is sensitive. Exposure is most likely in organizations running PeopleSoft Enterprise SCM eSupplier Connection 9.2, especially where the HTTP interface is reachable by many internal users, vendors, or partner networks. The provided sources do not identify other affected versions or products. Treat this as a priority for PeopleSoft environments handling supplier or procurement data, especially externally reachable portals. It is less urgent than anonymous remote code execution, but unauthorized privileged data access or modification could materially affect vendor operations and data integrity. Mitigation focus: Review Oracle April 2017 Critical Patch Update guidance for this PeopleSoft component.; Apply the relevant Oracle-supported update if the instance is affected.; Restrict HTTP access to PeopleSoft eSupplier Connection to trusted networks and users..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.