CVE-2007-3870 - Multiple unspecified vulnerabilities in the Human Capital Management component in Oracle PeopleSoft

CVE-2007-3870

Summary

Multiple unspecified vulnerabilities in the Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 Bundle 11 allow local users to have unknown impact via unknown vectors, aka (1) PSE06 and (2) PSE07. 9.0 Bundle 7

References

Vulnerable Configurations

cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle11:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle11:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 29-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

cert	TA07-200A
confirm	http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html
hp	HPSBMA02133 SSRT061201
misc	http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html
sectrack	1018415
secunia	26114 26166
vupen	ADV-2007-2562 ADV-2007-2635
xf	oracle-cpu-july2007(35490)

Last major update

29-07-2017 - 01:32

Published

18-07-2007 - 19:30

Last modified

29-07-2017 - 01:32