Code injection

Unspecified vulnerability in the PeopleSoft Enterprise HCM TAM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-3404

CVE-2009-3404 affects Oracle PeopleSoft PeopleTools & Enterprise Portal (PeopleSoft/JD Edwards) with product version 8.49.23. The vulnerability is described as unspecified and requires a valid session (authenticated access) to impact integrity, with no remote exploitation without authentication. ...

CVE-2009-3406

CVE-2009-3406 affects Oracle PeopleSoft/JD Edwards tools: JD Edwards Tools, version 8.98.2.1. The vulnerability is in the JD Edwards Tools component and allows remote authenticated users to affect confidentiality via unknown vectors (Adjacent Network/ JDENET context shown in the connected risk ma...

CVE-2009-3406

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2009-3405

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to affect integrity and availability via unknown vectors...

CVE-2009-3405

CVE-2009-3405 affects Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne (JD Edwards Tools), specifically JD Edwards Tools version 8.98.1.4. The vulnerability is described as unspecified, allowing remote authenticated users to impact integrity and availability. The CVSS-based context indic...

CVE-2009-3404

Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect integrity via unknown vectors...

Oracle Releases Critical Patch Update

Oracle has released its Critical Patch Update for October 2009 to address 38 vulnerabilities across several database and server products. The update contains the following security fixes: 16 for the Oracle Database 3 for the Oracle Application Server 8 for the Oracle E-Business Suite and...

CVE-2009-1988

Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.21 allows remote attackers to affect integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-1987

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.21 allows remote attackers to affect integrity via unknown vectors...

CVE-2009-1989

Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-1987

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.21 allows remote attackers to affect integrity via unknown vectors...

CVE-2009-1987

CVE-2009-1987 affects Oracle PeopleSoft Enterprise PeopleTools – Enterprise Portal (PIB: 8.49.21). The connected Nessus entry for PEOPLESOFT_JMSLCA_ACTIVITY_XSS.NASL documents a cross-site scripting (XSS) vulnerability in the JMS Listening Connector Activity parameter: input handling is not sanit...

CVE-2009-1988

The CVE-2009-1988 entry affects the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne, specifically versions 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9. The vulnerability is described as unspecified, allowing remote authenticated user...

CVE-2009-1988

Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2009-1989

CVE-2009-1989 affects PeopleSoft Enterprise Financial Management System (FMS) in Oracle PeopleSoft/JD Edwards: vulnerable component is PeopleSoft Enterprise FMS; affected versions are 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24. The vulnerability allows remote authenticated users to affect confiden...

CVE-2009-1014

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1013...