CVE-2009-1988 - Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle Peo

CVE-2009-1988

Summary

Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors.

References

Vulnerable Configurations

cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.8:sp1:*:*:*:*:*:*
cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.8:sp1:*:*:*:*:*:*
cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9:bundle19:*:*:*:*:*:*
cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9:bundle19:*:*:*:*:*:*
cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:bundle9:*:*:*:*:*:*
cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:bundle9:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:sp1:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:sp1:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle19:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle19:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:bundle9:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:bundle9:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 17-08-2017 - 01:30)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:S/C:P/I:N/A:N

refmap via4

bid	35696
confirm	http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
osvdb	55910
sectrack	1022566
secunia	35776
vupen	ADV-2009-1900
xf	oracle-pse-jdee-pehem-unspecified(51770)

Last major update

17-08-2017 - 01:30

Published

14-07-2009 - 23:30

Last modified

17-08-2017 - 01:30