Lucene search

K
cveOracleCVE-2009-3404
HistoryOct 22, 2009 - 6:30 p.m.

CVE-2009-3404

2009-10-2218:30:00
oracle
web.nvd.nist.gov
32
cve-2009-3404
peoplesoft
enterprise portal
oracle
jd edwards
vulnerability
remote authenticated users
integrity

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

5.5

Confidence

Low

EPSS

0.002

Percentile

53.6%

Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect integrity via unknown vectors.

Affected configurations

Nvd
Node
oraclejd_edwards_enterpriseoneMatch8.49.23
OR
oraclepeoplesoft_enterpriseMatch8.49.23
VendorProductVersionCPE
oraclejd_edwards_enterpriseone8.49.23cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.23:*:*:*:*:*:*:*
oraclepeoplesoft_enterprise8.49.23cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.23:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

5.5

Confidence

Low

EPSS

0.002

Percentile

53.6%