Login Request a demo
Unscored severity · published Oct 14, 2008
CVE-2008-4000
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue allows bypass of the lockout mechanism using brute force guessing of credentials and a response discrepancy information leak when the password is correct.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EN
Enterpriseone · Jdedwards
8.48.18 · source: NVD
JE
JD Edwards Enterpriseone · Oracle
8.49.14 · source: NVD
PE
Peoplesoft Enterprise · Oracle
8.48.18 · source: NVD
PP
Peoplesoft Peopletools · Oracle
8.49.14 · source: NVD
Affected product
EN
Enterpriseone
Jdedwards
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4000
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4000
Vendor Advisory
http://secunia.com/advisories/32291
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/497543/100/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1021055
www.vupen.com
http://www.vupen.com/english/advisories/2008/2825
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45902
More from Enterpriseone
7.5
CVE-2020-1967
Segmentation fault in SSL_check_chain
–
CVE-2008-5455
Unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote…
–
CVE-2008-5452
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to…
–
CVE-2008-5451
Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5 allows remote authenticated users to affect…
–
CVE-2008-4004
Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows…