Vulnerability Details : CVE-2008-4000
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue allows bypass of the lockout mechanism using brute force guessing of credentials and a response discrepancy information leak when the password is correct.
Products affected by CVE-2008-4000
- cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.18:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.14:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:peoplesoft_peopletools:8.49.14:*:*:*:*:*:*:*
- cpe:2.3:a:jdedwards:enterpriseone:8.48.18:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2008-4000
0.52%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 77 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2008-4000
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.4
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:P/A:N |
10.0
|
4.9
|
NIST |
References for CVE-2008-4000
Jump to