CVE-2010-0080

CVE-2010-0080 affects Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne: PeopleSoft Enterprise HCM – eProfile, version bundles 8.9 Bundle #21 and 9.0 Bundle #11. The vulnerability targets the eProfile component and can be exploited by remote authenticated users to compromise confidentiali...

CVE-2010-0080

Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle, 21 and 9.0 Bundle 11 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Oracle Releases Critical Patch Update for January 2010

Oracle has released its Critical Patch Update for January 2010 to address 24 vulnerabilities across several products. This update contains the following security fixes: 10 for Oracle Database 3 for Oracle Application Server 3 for the Oracle Applications Suite 1 for PeopleSoft and JD Edwards Suite...

PeopleSoft PeopleTools JMS Listening Connector Activity Parameter XSS

The remote web server is running an instance of PeopleSoft PeopleTools that fails to sanitize user-supplied input to the 'Activity' parameter on submission to the JMS Listening Connector Administrator interface before using it to generate dynamic HTML output. An attacker may be able to leverage...

CVE-2009-3409

Unspecified vulnerability in the PeopleSoft Enterprise HCM TAM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Code injection

Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2009-3404

Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2009-3405

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to affect integrity and availability via unknown vectors...

CVE-2009-3406

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to affect confidentiality via unknown vectors...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise HCM TAM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Code injection

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to affect integrity and availability via unknown vectors...

Code injection

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2009-3406

CVE-2009-3406 affects Oracle PeopleSoft/JD Edwards tools: JD Edwards Tools, version 8.98.2.1. The vulnerability is in the JD Edwards Tools component and allows remote authenticated users to affect confidentiality via unknown vectors (Adjacent Network/ JDENET context shown in the connected risk ma...

CVE-2009-3404

CVE-2009-3404 affects Oracle PeopleSoft PeopleTools & Enterprise Portal (PeopleSoft/JD Edwards) with product version 8.49.23. The vulnerability is described as unspecified and requires a valid session (authenticated access) to impact integrity, with no remote exploitation without authentication. ...

CVE-2009-3409

CVE-2009-3409 affects Oracle PeopleSoft Enterprise HCM (TAM), version 9.0 Bundle 10. The vulnerability (HTTP, Valid Session) can be exploited by remote authenticated users to impact confidentiality and integrity with Partial+ impact; CVSS base score 3.6 (LOW). Mitigation is to apply the Oracle Cr...

CVE-2009-3409

Unspecified vulnerability in the PeopleSoft Enterprise HCM TAM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-3405

CVE-2009-3405 affects Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne (JD Edwards Tools), specifically JD Edwards Tools version 8.98.1.4. The vulnerability is described as unspecified, allowing remote authenticated users to impact integrity and availability. The CVSS-based context indic...

CVE-2009-3405

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to affect integrity and availability via unknown vectors...

CVE-2009-3406

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2009-3404

Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect integrity via unknown vectors...