Enterpriseone

Vendor:

First CVE: Nov 2, 2005 · Active for 20 years

Total CVEs

More Total CVEs than 89% of tracked products

2.8

Avg CVEs / Year

Higher CVE frequency than 75% of tracked products

7.9

Avg CVSS

Higher Avg CVSS than 68% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Enterpriseone over time

Volume of CVEsAvg CVSS Base Score

First CVE

Nov 2, 2005

20 years ago

Most Recent CVE

Apr 16, 2008

6,675 days ago

CVE Severity & Scoring

Enterpriseone11 CVEs

82%

All CVEs352,713 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown11 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown11 (100.0%)

User Interaction

None0 (0.0%)

Unknown11 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown11 (100.0%)

Top CVEs

Signals from CVEs in this product scope (11 CVEs).

11 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2007-0297MEDIUM Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE03.	Jan 17, 2007	4.0	28	NO	YES
CVE-2006-3724HIGH Unspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools 8.95 and 8.96 has unknown impact and attack vectors, aka Oracle Vuln# JDE01.	Jul 21, 2006	10.0	26	NO	NO
CVE-2006-1887HIGH Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Security Server 8.95.J1 has unknown impact and attack vectors, aka Vuln# JDE01.	Apr 20, 2006	10.0	26	NO	NO
CVE-2006-0281HIGH Unspecified vulnerability in Oracle JD Edwards HTML Server 8.95.F1 SP23_L1 has unspecified impact and attack vectors, as identified by Oracle Vuln# JDE01.	Jan 18, 2006	10.0	26	NO	NO
CVE-2005-3465HIGH Unspecified vulnerability in JDEdwards HTML Server in Oracle EnterpriseOne 8.94 OneWorld XE up to 8.95_B1, 8.94_Q1, and SP23_K1 has unknown impact and attack vectors, as identified	Nov 2, 2005	10.0	26	NO	NO
CVE-2008-1829HIGH Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote attack vecto	Apr 16, 2008	9.0	23	NO	NO
CVE-2006-5378HIGH Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln#	Oct 18, 2006	9.0	23	NO	NO
CVE-2006-0552HIGH Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identifi	Feb 4, 2006	7.5	21	NO	NO
CVE-2007-0295HIGH Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13 and 8.47.11 has unknown impact and attack vectors in PeopleTools, aka PSE01.	Jan 17, 2007	7.8	20	NO	NO
CVE-2007-2134HIGH Unspecified vulnerability in the HTML Server in Oracle JD Edwards EnterpriseOne SP23_Q1 and 8.96.I1 has unknown impact and local attack vectors, aka JDE01.	Apr 18, 2007	7.2	18	NO	NO

View all 11 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (11 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

1 CVE

9.1% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (11 CVEs).

Media Mentions

Signals from CVEs in this product scope (11 CVEs).

Top CNAs Publishing CVEs For Enterpriseone

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
sp23_q1	1	7.2	0.4%	0
sp23_o2	1	9.0	2.9%	0
sp23_l1	2	8.8	4.7%	0
8.96.d1	1	9.0	2.9%	0
8.96.11	1	7.2	0.4%	0
8.96	1	10.0	3.7%	0
8.95.p1	1	9.0	2.9%	0
8.95.j1	1	10.0	3.9%	0
8.95.f1	2	8.8	4.7%	0
8.95	1	10.0	3.7%	0
8.94	1	10.0	3.8%	0
8.8	1	9.0	2.0%	0
8.48.06	2	3.0	1.9%	1
8.47.11	3	4.6	1.9%	1
8.22.13	2	5.0	1.2%	0