CVE-2007-5532

Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE01.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://marc.info/?l=bugtraq&m=119332677525918&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=119332677525918&w=2	Mailing List Third Party Advisory
http://secunia.com/advisories/27251	Third Party Advisory
http://secunia.com/advisories/27409	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html	Vendor Advisory
http://www.securitytracker.com/id?1018823	Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA07-290A.html	Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2007/3524	Permissions Required
http://www.vupen.com/english/advisories/2007/3626	Permissions Required
http://marc.info/?l=bugtraq&m=119332677525918&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=119332677525918&w=2	Mailing List Third Party Advisory
http://secunia.com/advisories/27251	Third Party Advisory
http://secunia.com/advisories/27409	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html	Vendor Advisory
http://www.securitytracker.com/id?1018823	Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA07-290A.html	Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2007/3524	Permissions Required
http://www.vupen.com/english/advisories/2007/3626	Permissions Required

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:peoplesoft_enterprise::::::::
	cpe:2.3:a:oracle:peoplesoft_enterprise::::::::
	cpe:2.3:a:oracle:peoplesoft_enterprise::::::::
	cpe:2.3:a:oracle:peoplesoft_enterprise::::::::

History

No history.

Information

Published : 2007-10-17 23:17

Updated : 2025-04-09 00:30

NVD link : CVE-2007-5532

Mitre link : CVE-2007-5532

CVE.ORG link : CVE-2007-5532

JSON object : View

Products Affected

oracle

peoplesoft_enterprise

CWE

NVD-CWE-noinfo

{"id": "CVE-2007-5532", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-10-17T23:17:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=119332677525918&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=119332677525918&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27251", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27409", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1018823", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-290A.html", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/3524", "tags": ["Permissions Required"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/3626", "tags": ["Permissions Required"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=119332677525918&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://marc.info/?l=bugtraq&m=119332677525918&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27251", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27409", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1018823", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-290A.html", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/3524", "tags": ["Permissions Required"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/3626", "tags": ["Permissions Required"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE01."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente People Tools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05, tiene impacto desconocido y vectores de ataque remotos, tambi\u00e9n conocido como PSE01."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21C0FCFB-5D66-41B8-843C-D2EAC4985ECD", "versionEndIncluding": "8.22.17", "versionStartIncluding": "8.22"}, {"criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B381F40-E99F-4186-ADB9-E7EFBBDF42C1", "versionEndIncluding": "8.47.14", "versionStartIncluding": "8.47"}, {"criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CABF4A4-8BC4-44B3-B82A-B4297B579569", "versionEndIncluding": "8.48.13", "versionStartIncluding": "8.48"}, {"criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00102B78-AA66-41F6-A8B5-359EC95DA492", "versionEndIncluding": "8.49.05", "versionStartIncluding": "8.49"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}