CVE-2010-4434
Summary
| CVE | CVE-2010-4434 |
|---|---|
| State | PUBLISHED |
| Assigner | oracle |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-01-19 17:00:02 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.50.0 through 8.50.14 and 8.51.0 through 8.51.04 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal. |
Risk And Classification
Primary CVSS: v2.0 4 from [email protected]
AV:N/AC:L/Au:S/C:P/I:N/A:N
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:S/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Peoplesoft And Jdedwards Product Suite | 8.50.0 | All | All | All |
| Application | Oracle | Peoplesoft And Jdedwards Product Suite | 8.50.14 | All | All | All |
| Application | Oracle | Peoplesoft And Jdedwards Product Suite | 8.51.0 | All | All | All |
| Application | Oracle | Peoplesoft And Jdedwards Product Suite | 8.51.04 | All | All | All |
| Application | Oracle | Peoplesoft Enterprise | 8.50.0 | All | All | All |
| Application | Oracle | Peoplesoft Enterprise | 8.50.14 | All | All | All |
| Application | Oracle | Peoplesoft Enterprise | 8.51.0 | All | All | All |
| Application | Oracle | Peoplesoft Enterprise | 8.51.04 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Oracle PeopleSoft Enterprise PeopleTools Multiple Vulnerabilities - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Webmail - OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Oracle PeopleSoft CVE-2010-4434 Remote Enterprise PeopleTools Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| osvdb.org/70568 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| Oracle PeopleSoft PeopleTools and JDEdwards Bugs Let Remote Users Partially Deny Service, Access Data, and Modify Data - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Oracle Critical Patch Update Pre-Release Announcement - January 2011 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.