Vulnerabilities > CVE-2009-3405 - Remote JD Edwards Tools vulnerability in Oracle JD Edwards Tools

CVSS 4.1 - MEDIUM

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

PARTIAL

low complexity

oracle

NVD

Published: 2009-10-22

Updated: 2012-10-23

Summary

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to affect integrity and availability via unknown vectors.

Vulnerable Configurations

Part	Description	Count
Application	Oracle Oracle JD Edwards Enterpriseone 8.98.1.4 Oracle Peoplesoft Enterprise 8.98.1.4	2

References

http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
http://www.securityfocus.com/bid/36772
http://www.securitytracker.com/id?1023061
http://www.us-cert.gov/cas/techalerts/TA09-294A.html