CVE-2019-2519

CVE-2019-2519 is an easily exploitable vulnerability in the PeopleSoft Enterprise SCM eProcurement component (Manage Requisition Status) of Oracle PeopleSoft Products, specifically version 9.2. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. While requiring human interaction from a non-attacker, successful exploitation can lead to unauthorized update, insert, delete, and read access to a subset of eProcurement data, potentially impacting additional products. With a CVSS 3.0 Base Score of 6.1 (Medium), it carries low confidentiality and integrity impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.