Every CVE Search/ Get API key

CVE-2011-2277

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft...

5.5 Medium

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing.

Exploit likelihood

0.99%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.5

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing.

Record
CVE-2011-2277
CVSS 2.0
5.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:N
Updated
2026-11-02
CVE List No score

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing.

Record
CVE-2011-2277
Updated
2026-11-02
EUVDEUVD-2011-2266 No score

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing.

Record
EUVD-2011-2266
Updated
2026-11-03
GitHub AdvisoriesGHSA-7j57-rvfr-h57j No score

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft...

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing.

Record
GHSA-7j57-rvfr-h57j
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2277 is a medium vulnerability (CVSS 5.5) in Oracle Peoplesoft Enterprise Scm, published July 21, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.99%, the 62nd percentile. No source names a fixed version.

References

MoveEnter Open