Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.0

PeopleSoft HCM ePerformance and JD Edwards allow remote attacks

CVE-2008-1830 · published 18 years ago
Summary

The HCM ePerformance feature in Oracle PeopleSoft and the EnterpriseOne system from JD Edwards both contain an undisclosed flaw that could be triggered from outside the network. Because the exact effect is unknown, it might let an attacker interfere with the application or access data. Organizations should check for and install any security updates from Oracle and JD Edwards as soon as they are available.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
jdedwards enterpriseone 8.9
9.0
cpe:2.3:a:jdedwards:enterpriseone:8.9:*:*:*:*:*:*:*
oracle peoplesoft_hcm_eperformance 8.9
9.0
cpe:2.3:a:oracle:peoplesoft_hcm_eperformance:8.9:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 and 9.0 has unknown impact and remote attack vectors, aka PSE03.
Unspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 and 9.0 has unknown impact and remote attack vectors, aka PSE03.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.0 Critical
Exploitation
2% chance of attack within 30 days
Timeline
Published16 Apr 2008
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2008-1830 · NVD
Track software like this
Free during beta