CVE-2008-0348: Oracle Application Server

High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07 have unknown impact and remote attack vectors, aka (1) PSE01, (2) PSE03, and (3) PSE04.

Affected products

• Oracle Application Server: version 1.0.2.2 only; version 9.0.4.3 only; version 10.1.2.0.2 only; version 10.1.2.1.0 only; version 10.1.2.2.0 only; version 10.1.3.0.0 only; …
• Oracle Collaboration Suite: version 10.1.2 only
• Oracle Database Server: version 9.0.1.5 only; version 9.2.0.8 only; version 9.2.0.8dv only; version 10.1.0.5 only; version 10.2.0.2 only; version 10.2.0.3 only; …
• Oracle E-Business Suite: version 11.5.9 only; version 11.5.10 only; version 11.5.10.2 only; version 12.0.0 only; version 12.0.1 only; version 12.0.2 only; …
• Oracle PeopleSoft Enterprise PeopleTools: version 8.47 only; version 8.48 only; version 8.49 only

Published 2008-01-17. Last modified 2026-06-16.