CVE-2008-4000

MEDIUM 6.4CVE-2008-4000 · Published 14/10/2008 · updated 16/06/2026

In short

CVE-2008-4000 is a MEDIUM (CVSS 6.4) vulnerability affecting enterpriseone (jdedwards), jd edwards enterpriseone (oracle), peoplesoft enterprise (oracle).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
enterpriseone jdedwards	`= 8.48.18`	No fix yet
jd edwards enterpriseone oracle	`= 8.49.14`	No fix yet
peoplesoft enterprise oracle	`= 8.48.18`	No fix yet
peoplesoft peopletools oracle	`= 8.49.14`	No fix yet

Description

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue allows bypass of the lockout mechanism using brute force guessing of credentials and a response discrepancy information leak when the password is correct.

References

More vulnerabilities in enterpriseone

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2008-4000 is a MEDIUM (CVSS 6.4) vulnerability affecting enterpriseone (jdedwards), jd edwards enterpriseone (oracle), peoplesoft enterprise (oracle).

Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.8% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

enterpriseone

jdedwards

= 8.48.18

No fix yet

jd edwards enterpriseone

oracle

= 8.49.14