{"api_version":"1","generated_at":"2026-07-23T09:40:12+00:00","cve":"CVE-2009-1989","urls":{"html":"https://cve.report/CVE-2009-1989","api":"https://cve.report/api/cve/CVE-2009-1989.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-1989","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-1989"},"summary":{"title":"CVE-2009-1989","description":"Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","state":"PUBLISHED","assigner":"oracle","published_at":"2009-07-14 23:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/1900","name":"http://www.vupen.com/english/advisories/2009/1900","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","name":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Oracle Critical Patch Update Advisory - July 2009","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/35776","name":"http://secunia.com/advisories/35776","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"],"title":"Oracle Products Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51771","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51771","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1022566","name":"http://www.securitytracker.com/id?1022566","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"SecurityTracker.com Archives - Oracle PeopleSoft Enterprise Bugs Let Remote Users Modify Data","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/55911","name":"http://osvdb.org/55911","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/35694","name":"http://www.securityfocus.com/bid/35694","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"504 Gateway Time-out","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1989","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1989","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"1989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"jd_edwards_enterpriseone","cpe6":"8.8","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"jd_edwards_enterpriseone","cpe6":"8.9","cpe7":"bundle14","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"jd_edwards_enterpriseone","cpe6":"9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"peoplesoft_enterprise","cpe6":"8.8","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"peoplesoft_enterprise","cpe6":"8.9","cpe7":"bundle14","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"peoplesoft_enterprise","cpe6":"9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T05:36:20.315Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"55911","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/55911"},{"name":"35776","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35776"},{"name":"ADV-2009-1900","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/1900"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html"},{"name":"1022566","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1022566"},{"name":"oracle-pse-jdee-pef-unspecified(51771)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51771"},{"name":"35694","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/35694"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-07-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"55911","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/55911"},{"name":"35776","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35776"},{"name":"ADV-2009-1900","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/1900"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html"},{"name":"1022566","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1022566"},{"name":"oracle-pse-jdee-pef-unspecified(51771)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51771"},{"name":"35694","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/35694"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2009-1989","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"55911","refsource":"OSVDB","url":"http://osvdb.org/55911"},{"name":"35776","refsource":"SECUNIA","url":"http://secunia.com/advisories/35776"},{"name":"ADV-2009-1900","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/1900"},{"name":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html"},{"name":"1022566","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1022566"},{"name":"oracle-pse-jdee-pef-unspecified(51771)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51771"},{"name":"35694","refsource":"BID","url":"http://www.securityfocus.com/bid/35694"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2009-1989","datePublished":"2009-07-14T23:00:00.000Z","dateReserved":"2009-06-08T00:00:00.000Z","dateUpdated":"2024-08-07T05:36:20.315Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-07-14 23:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"B431E05A-B8C1-40C6-96D7-62E540FA4776"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9:bundle14:*:*:*:*:*:*","matchCriteriaId":"42F9F31D-3074-4418-9566-5DB6C4367EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:*:*:*:*:*:*:*","matchCriteriaId":"AA7FAE18-AEFE-4BD6-ABAC-03EF9C61CCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"5BB1FADD-188C-498F-B789-39EAE57DB92B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle14:*:*:*:*:*:*","matchCriteriaId":"04347985-3F19-4D42-9390-06DE1B3E6992"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0B4851-1897-414C-B7D2-4C158D648629"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"1989","Ordinal":"1","Title":"CVE-2009-1989","CVE":"CVE-2009-1989","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"1989","Ordinal":"1","NoteData":"Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","Type":"Description","Title":"CVE-2009-1989"},{"CveYear":"2009","CveId":"1989","Ordinal":"2","NoteData":"2009-07-14","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"1989","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}