CVE-2008-0349

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-17 · updated 2026-06-16

Description

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.15 and 8.49.07 has unknown impact and remote attack vectors, aka PSE02.

Affected products

Oracle Application Server: 1.0.2.2, 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, 10.1.2.2.0, 10.1.3.0.0 (+2)
Oracle Collaboration Suite: 10.1.2
Oracle Database: 9.0.1.5, 9.2.0.8, 9.2.0.8dv, 10.1.0.5, 10.2.0.2, 10.2.0.3 (+1)
Oracle E-Business Suite: 11.5.9, 11.5.10, 11.5.10.2, 12.0.0, 12.0.1, 12.0.2 (+1)
Oracle Corporation PeopleSoft Enterprise PT PeopleTools: 8.47, 8.48, 8.49

References

http://marc.info/?l=bugtraq&m=120058413923005&w=2
http://secunia.com/advisories/28518
http://secunia.com/advisories/28556
http://securitytracker.com/id?1019218
http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
http://www.securityfocus.com/bid/27229
http://www.us-cert.gov/cas/techalerts/TA08-017A.html
http://www.vupen.com/english/advisories/2008/0150
http://www.vupen.com/english/advisories/2008/0180
http://marc.info/?l=bugtraq&m=120058413923005&w=2
http://secunia.com/advisories/28518
http://secunia.com/advisories/28556

Get alerted when CVE-2008-0349 or the next vulnerability affects your stack