CVE-2017-10368

CVE-2017-10368 is a vulnerability in the PeopleSoft Enterprise SCM eProcurement component (specifically Manage Requisition Status) affecting versions 9.1.00 and 9.2.00. This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, requiring user interaction to succeed. Successful attacks can lead to unauthorized read, update, insert, or delete access to some eProcurement data, potentially impacting additional products. With a CVSS 3.0 Base Score of 6.1 (Medium), the vulnerability has low confidentiality and integrity impacts. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.