CVE-2009-1988: Medium severity Oracle JD Edwards EnterpriseOne vulnerability

Published Jul 14, 2009

Updated

Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors.

Affected Software

6 affected components

Oracle JD Edwards EnterpriseOne=8.8-sp1

Oracle JD Edwards EnterpriseOne=8.9-bundle19

Oracle JD Edwards EnterpriseOne=9.0-bundle9

Oracle PeopleSoft Enterprise=8.8-sp1

Oracle PeopleSoft Enterprise=8.9-bundle19

Oracle PeopleSoft Enterprise=9.0-bundle9

Remediation

Patch Available

http://www.vupen.com/english/advisories/2009/1900

Event History

Jul 14, 2009

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1988?

CVE-2009-1988 has a medium severity rating.

How do I fix CVE-2009-1988?

To fix CVE-2009-1988, update to the latest patch or version of the affected Oracle PeopleSoft Enterprise or JD Edwards software.

Which versions are affected by CVE-2009-1988?

CVE-2009-1988 affects Oracle JD Edwards EnterpriseOne versions 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9, as well as Oracle PeopleSoft Enterprise versions 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9.

What type of vulnerability is CVE-2009-1988?

CVE-2009-1988 is an unspecified vulnerability that affects confidentiality.

Who is at risk due to CVE-2009-1988?

Remote authenticated users are at risk due to CVE-2009-1988, which may allow them to affect the confidentiality of the system.