CVE-2003-0950
Estado: ModificadaAlta (7.5)—
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.11%
- Percentil entre todas las CVEs puntuadas: 81
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2003-0950",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2003-12-15T05:00:00.000",
"references": [
{
"url": "http://www.securityfocus.com/bid/9041",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://xforce.iss.net/xforce/alerts/id/157",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12805",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/9041",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://xforce.iss.net/xforce/alerts/id/157",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12805",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file."
},
{
"lang": "es",
"value": "PeopleSoft, PeopleTools, 8.1x, 8.2x, y 8.4x permite que atacantes remotos ejecuten comando arbitrarios subiendo un fichero al Servlet IClient, adivinando el nombre del directorio usado para el almacenar el fichero (no suficientemente aleatorio) y por tanto accediendo al fichero."
}
],
"lastModified": "2026-06-16T22:03:13.853",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70B618A8-48AF-4193-BCD8-7B0F24923860"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE31EA39-F6EE-4FC6-A64F-74E1364A84C3"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5611ED3-9504-469C-A33D-D6AB31971BE5"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "030FF50A-1D1D-4D7D-964E-2F2CA3980C27"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D113AFE-BEF6-4557-B814-073F56912667"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9ADCBDC1-C291-4978-95CC-2955AF9F0149"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "623DDE5E-20CF-4002-A532-E1B0171FF0C5"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55820FF1-2A48-4699-8C90-90CBC0C2D6A4"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAD1CF68-901D-4366-81F1-20E561BEB405"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B7B6AF6-2C2B-4186-911A-63D7CCE34E79"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A132448-0960-4878-9947-8F0B07C2E516"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15C45E32-CDEB-4AB2-B3BB-1F399F98E0B7"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.40:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "805FBA0A-0B52-4E61-A45C-E2C9AD48E555"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F94A7F77-D984-49BD-B59E-EBBC91C56C66"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.42:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD78CC13-C007-4AB1-912E-16B37D1D55CD"
},
{
"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.43:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECCB21D3-4FCB-4F0E-8430-B587512D04ED"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}