CVE-2008-2620: Medium severity oracle jd edwards enterpriseone tools vulnerability

Published Jul 15, 2008

Updated

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2621, and CVE-2008-2622.

Affected Software

5 affected components

Oracle JD Edwards EnterpriseOne=8.48.17

Oracle JD Edwards EnterpriseOne=8.49.11

Oracle PeopleSoft Enterprise=8.48.17

Oracle PeopleSoft Enterprise=8.49.11

Oracle PeopleSoft PeopleTools component

Event History

Jul 15, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2620?

The severity of CVE-2008-2620 has not been clearly defined but it is classified as having an unknown impact.

How do I fix CVE-2008-2620?

To fix CVE-2008-2620, it is recommended to apply the latest patches provided by Oracle for affected products.

What versions are affected by CVE-2008-2620?

CVE-2008-2620 affects Oracle PeopleSoft Enterprise version 8.49.11, Oracle JD Edwards EnterpriseOne version 8.48.17, and PeopleTools components.

Can CVE-2008-2620 be exploited remotely?

Yes, CVE-2008-2620 has remote authenticated attack vectors.

Is there a workaround for CVE-2008-2620?

Currently, there are no specified workarounds for CVE-2008-2620; patching is the primary mitigation.