CVE-2009-1988

2009-07-1423:30:00

[email protected]

web.nvd.nist.gov

cve-2009-1988

peoplesoft enterprise

hrms

eprofile manager

oracle peoplesoft

jd edwards enterpriseone

confidentiality

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.7%

JSON

Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors.

Affected configurations

NVD

Node

oraclejd_edwards_enterpriseoneMatch8.8sp1

oraclejd_edwards_enterpriseoneMatch8.9bundle19

oraclejd_edwards_enterpriseoneMatch9.0bundle9

oraclepeoplesoft_enterpriseMatch8.8sp1

oraclepeoplesoft_enterpriseMatch8.9bundle19

oraclepeoplesoft_enterpriseMatch9.0bundle9

CPENameOperatorVersion
oracle:jd_edwards_enterpriseoneoracle jd edwards enterpriseoneeq8.8
oracle:jd_edwards_enterpriseoneoracle jd edwards enterpriseoneeq8.9
oracle:jd_edwards_enterpriseoneoracle jd edwards enterpriseoneeq9.0
oracle:peoplesoft_enterpriseoracle peoplesoft enterpriseeq8.8
oracle:peoplesoft_enterpriseoracle peoplesoft enterpriseeq8.9
oracle:peoplesoft_enterpriseoracle peoplesoft enterpriseeq9.0

CPE	Name	Operator	Version
oracle:jd_edwards_enterpriseone	oracle jd edwards enterpriseone	eq	8.8
oracle:jd_edwards_enterpriseone	oracle jd edwards enterpriseone	eq	8.9
oracle:jd_edwards_enterpriseone	oracle jd edwards enterpriseone	eq	9.0
oracle:peoplesoft_enterprise	oracle peoplesoft enterprise	eq	8.8
oracle:peoplesoft_enterprise	oracle peoplesoft enterprise	eq	8.9
oracle:peoplesoft_enterprise	oracle peoplesoft enterprise	eq	9.0