CVE-2008-4004

CVE-2008-4004 affects the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne versions 8.97.2.2 and 8.98.0.1. The vulnerability is described as unspecified with local access impacting confidentiality and integrity via unknown vectors; n...

CVE-2008-4003: Undefined Security Weakness

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality via unknown vectors...

CVE-2008-4000: Undefined Security Weakness

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU...

CVE-2008-4001: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne EP 8.9 and EP 9.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2008-4002: Undefined Security Weakness

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2008-4004: Undefined Security Weakness

Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows local users to affect confidentiality and integrity via unknown vectors...

Code injection

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620,...

Code injection

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620,...

Code injection

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618,...

CVE-2008-2616

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620,...

CVE-2008-2618

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2620,...

CVE-2008-2622

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618,...

CVE-2008-2620

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618,...

CVE-2008-2617

CVE-2008-2617 affects Oracle PeopleSoft Enterprise PeopleTools components 8.48.17 and 8.49.11. Documented as an HTTP-accessible vulnerability requiring a valid session (authenticated), with partial impact to confidentiality, integrity, and availability. It is listed under the PeopleSoft/JD Edward...

CVE-2008-2622

CVE-2008-2622 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools (PeopleSoft/JD Edwards) affecting version 8.48.17 and 8.49.11. The connected PeopleSoft PeopleTools risk matrix entry identifies the vulnerability as network-exploitable with HTTP transport, requiring a valid session, an...

CVE-2008-2616

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620,...

CVE-2008-2617

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2618, CVE-2008-2620,...

CVE-2008-2620

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618,...

CVE-2008-2615

CVE-2008-2615 is a PeopleSoft PeopleTools vulnerability affecting Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne. The connected PeopleSoft entry specifies that the issue affects PeopleTools components in 8.48.17 and 8.49.11 and can be exploited over HTTP with a valid session. The Oracl...

CVE-2008-2618

CVE-2008-2618 affects Oracle PeopleSoft Enterprise/ JD Edwards JD Edwards PeopleTools: vulnerable component is PeopleSoft PeopleTools, with affected versions 8.48.17 and 8.49.11. The linked risk matrix lists CVSSv2 base score 6.5 (AV:N/AC:L/Au:S/C:P/I:P/A:P). Attack surface noted as HTTP with a v...