Unscored severity · published Jul 18, 2007
CVE-2007-3868
Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PE
Peoplesoft Enterprise · Oracle
8.22.15; 8.47.13; 8.48.10; 8.49.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3868
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3868
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143
Vendor Advisory
http://secunia.com/advisories/26114
secunia.com
http://secunia.com/advisories/26166
www.integrigy.com
http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html
www.red-database-security.com
http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html
More from Peoplesoft Enterprise
8.1
CVE-2024-21283
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for Core)
7.5
CVE-2023-22047
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal)
6.7
CVE-2021-2151
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security)
6.1
CVE-2022-21639
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search Integration)
6.1
CVE-2019-2519
Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status)