SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2009-1989

Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via…

MEDIUM 5.5EPSS 1.48%

Does this matter?

Lower severity and a low EPSS score (1.48%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

CVSS 2.0
5.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N
EPSS
1.48% probability · 73th percentile
CISA KEV
Not listed
Affected
oracle/jd edwards enterpriseone · oracle/peoplesoft enterprise
Source
secalert_us@oracle.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.