{"id":"CVE-2008-4004","aliases":["EUVD-2008-3989","GHSA-v9c5-96rg-h24g"],"status":"published","title":"Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle...","description":"Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows local users to affect confidentiality and integrity via unknown vectors.","severity":{"version":"2.0","score":3.2,"vector":"AV:L/AC:L/Au:S/C:P/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00305,"percentile":0.23477,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2008-10-14T21:00:00Z","modified":"2026-06-16T22:56:58Z","products":[{"vendor":"jdedwards","product":"enterpriseone"},{"vendor":"oracle","product":"peoplesoft_enterprise"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/32291","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45906","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securitytracker.com/id?1021055","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4004"},{"url":"https://github.com/advisories/GHSA-v9c5-96rg-h24g"}],"sources":{"cve":[{"id":"CVE-2008-4004","description":"Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows local users to affect confidentiality and integrity via unknown vectors.","status":"published","published":"2008-10-14T21:00:00Z","modified":"2024-08-07T10:00:42.453Z","updated_at":"2026-11-02T14:34:46.950176Z"}],"euvd":[{"id":"EUVD-2008-3989","description":"Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows local users to affect confidentiality and integrity via unknown vectors.","status":"published","published":"2008-10-14T21:00:00Z","modified":"2024-08-07T10:00:42Z","updated_at":"2026-11-03T01:38:49.856064Z"}],"ghsa":[{"id":"GHSA-v9c5-96rg-h24g","title":"Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle...","description":"Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows local users to affect confidentiality and integrity via unknown vectors.","status":"published","published":"2022-05-02T00:05:51Z","modified":"2023-01-31T05:06:25Z","updated_at":"2026-11-02T14:49:01.53024Z"}],"nvd":[{"id":"CVE-2008-4004","description":"Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows local users to affect confidentiality and integrity via unknown vectors.","status":"published","published":"2008-10-14T21:11:11.457Z","modified":"2026-06-16T22:56:58.723Z","cvss":[{"version":"2.0","score":3.2,"vector":"AV:L/AC:L/Au:S/C:P/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:01:29.223028Z"}]}}