CVE-2008-2618
CVE-2008-2618 is a medium-severity vulnerability in Oracle Jd Edwards Enterpriseone with a CVSS 2.0 base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 6.5)
- EPSS exploit prediction: 2% (72nd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Oracle Jd Edwards Enterpriseone
- Published:
- Last modified:
Description
Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622.
Frequently asked questions
- What is CVE-2008-2618?
- Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622.
- How severe is CVE-2008-2618?
- CVE-2008-2618 has a CVSS 2.0 base score of 6.5, rated medium severity.
- Is CVE-2008-2618 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2008-2618?
- CVE-2008-2618 primarily affects Oracle Jd Edwards Enterpriseone. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2008-2618?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2008-2618 published?
- CVE-2008-2618 was published on 2008-07-15 and last updated on 2026-06-16.
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143
- http://secunia.com/advisories/31087
- http://secunia.com/advisories/31113
- http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html
- http://www.securitytracker.com/id?1020497
- http://www.vupen.com/english/advisories/2008/2109/references
- http://www.vupen.com/english/advisories/2008/2115
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43820
Affected products (5)
- cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.48.17:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.11:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.17:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.11:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:peoplesoft_peopletools_component:-:*:*:*:*:*:*:*
More vulnerabilities in Oracle Jd Edwards Enterpriseone
- CVE-2011-0825 — Medium (CVSS 6.8): Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through…
- CVE-2008-4007 — Medium (CVSS 6.5): Unspecified vulnerability in the PeopleSoft Enterprise Components component in Oracle PeopleSoft Enterprise and JD…
- CVE-2008-2622 — Medium (CVSS 6.5): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards…
- CVE-2008-2616 — Medium (CVSS 6.5): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards…
- CVE-2008-2620 — Medium (CVSS 6.5): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards…
- CVE-2008-2615 — Medium (CVSS 6.5): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards…