{"id":"CVE-2007-3868","aliases":["EUVD-2007-3852","GHSA-7rhm-xghr-qr5r"],"status":"published","title":"Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47...","description":"Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.021,"percentile":0.81826,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-07-18T19:00:00Z","modified":"2026-06-16T22:42:56Z","products":[{"vendor":"oracle","product":"peoplesoft_enterprise"}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c00727143","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/26114","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/26166","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-200A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2007/2562","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/2635","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35490","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securitytracker.com/id?1018415","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3868"},{"url":"https://github.com/advisories/GHSA-7rhm-xghr-qr5r"}],"sources":{"cve":[{"id":"CVE-2007-3868","description":"Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03.","status":"published","published":"2007-07-18T19:00:00Z","modified":"2024-08-07T14:37:04.156Z","updated_at":"2026-11-02T13:32:45.563938Z"}],"euvd":[{"id":"EUVD-2007-3852","description":"Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03.","status":"published","published":"2007-07-18T19:00:00Z","modified":"2024-08-07T14:37:04Z","updated_at":"2026-11-03T01:16:24.545796Z"}],"ghsa":[{"id":"GHSA-7rhm-xghr-qr5r","title":"Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47...","description":"Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03.","status":"published","published":"2022-05-01T18:18:09Z","modified":"2023-01-31T05:04:12Z","updated_at":"2026-11-02T14:48:37.736488Z"}],"nvd":[{"id":"CVE-2007-3868","description":"Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03.","status":"published","published":"2007-07-18T19:30:00Z","modified":"2026-06-16T22:42:56.387Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:17.964611Z"}]}}