VulnerabilityModified

CVE-2008-2616

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615,…

MEDIUM 6.5EPSS 1.57%

Does this matter?

Lower severity and a low EPSS score (1.57%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 1.57% probability · 74th percentile
CISA KEV: Not listed
Affected: oracle/jd edwards enterpriseone · oracle/peoplesoft enterprise · oracle/peoplesoft peopletools
Source: cve@mitre.org

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143Broken Link
http://secunia.com/advisories/31087Permissions Required
http://secunia.com/advisories/31113Permissions Required
http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.htmlVendor Advisory
http://www.securitytracker.com/id?1020497Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2109/referencesNot Applicable
http://www.vupen.com/english/advisories/2008/2115Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/43818
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143Broken Link
http://secunia.com/advisories/31087Permissions Required
http://secunia.com/advisories/31113Permissions Required
http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.htmlVendor Advisory
http://www.securitytracker.com/id?1020497Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2109/referencesNot Applicable
http://www.vupen.com/english/advisories/2008/2115Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/43818

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.