CVE-2007-5532

Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE01.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securitytracker.com/id?1018823	Third Party Advisory VDB Entry
http://secunia.com/advisories/27251	Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA07-290A.html	Third Party Advisory US Government Resource
http://secunia.com/advisories/27409	Third Party Advisory
http://www.vupen.com/english/advisories/2007/3524	Permissions Required
http://www.vupen.com/english/advisories/2007/3626	Permissions Required
http://marc.info/?l=bugtraq&m=119332677525918&w=2	Mailing List Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html	Vendor Advisory

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:peoplesoft_enterprise::::::::
	cpe:2.3:a:oracle:peoplesoft_enterprise::::::::
	cpe:2.3:a:oracle:peoplesoft_enterprise::::::::
	cpe:2.3:a:oracle:peoplesoft_enterprise::::::::

Information

Published : 2007-10-17 16:17

Updated : 2019-10-09 15:54

NVD link : CVE-2007-5532

Mitre link : CVE-2007-5532

JSON object : View

CWE

NVD-CWE-noinfo

Advertisement

Products Affected

oracle

peoplesoft_enterprise

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securitytracker.com/id?1018823", "name": "1018823", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/27251", "name": "27251", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-290A.html", "name": "TA07-290A", "tags": ["Third Party Advisory", "US Government Resource"], "refsource": "CERT"}, {"url": "http://secunia.com/advisories/27409", "name": "27409", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2007/3524", "name": "ADV-2007-3524", "tags": ["Permissions Required"], "refsource": "VUPEN"}, {"url": "http://www.vupen.com/english/advisories/2007/3626", "name": "ADV-2007-3626", "tags": ["Permissions Required"], "refsource": "VUPEN"}, {"url": "http://marc.info/?l=bugtraq&m=119332677525918&w=2", "name": "SSRT061201", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "HP"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html", "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE01."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-5532", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2007-10-17T23:17Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "8.47.14", "versionStartIncluding": "8.47"}, {"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "8.49.05", "versionStartIncluding": "8.49"}, {"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "8.22.17", "versionStartIncluding": "8.22"}, {"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "8.48.13", "versionStartIncluding": "8.48"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2019-10-09T22:54Z"}