Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2011-0836

🗓️ 20 Apr 2011 10:00:00Reported by oracleType 
cve
 cve🔗 web.nvd.nist.gov👁 64 Views🌐 WEB

Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote authenticated users to affect integrity

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2011-0836
19 Apr 201100:00
–circl
cvelist
Cvelist		CVE-2011-0836
20 Apr 201110:00
–cvelist
exploitdb
Exploit DB		Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu.maf?jdeowpBackButtonProtect' Cross-Site Scripting
19 Apr 201100:00
–exploitdb
exploitdb
Exploit DB		Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu_Menu.mafService?e1.namespace' Cross-Site Scripting
19 Apr 201100:00
–exploitdb
exploitdb
Exploit DB		Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu_OCL.mafService?e1.namespace' Cross-Site Scripting
19 Apr 201100:00
–exploitdb
exploitdb
Exploit DB		Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/MafletClose.mafService?RENDER_MAFLET' Cross-Site Scripting
19 Apr 201100:00
–exploitdb
exploitdb
Exploit DB		Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/JASMafletMafBrowserClose.mafService?jdemafjasLinkTarget' Cross-Site Scripting
19 Apr 201100:00
–exploitdb
euvd
EUVD		EUVD-2011-0848
7 Oct 202500:30
–euvd
nvd
NVD		CVE-2011-0836
20 Apr 201110:55
–nvd
oracle
Oracle		Oracle Critical Patch Update - April 2011
19 Apr 201100:00
–oracle
Rows per page
NVD
Node
OR
oracleenterpriseone_toolsMatch8.9
oraclejd_edwards_enterpriseoneMatch8.9budle14
oraclejd_edwards_enterpriseoneMatch8.9bundle14
oraclejd_edwards_enterpriseoneMatch8.9bundle21
oraclejd_edwards_enterpriseoneMatch8.9bundle9
oraclejd_edwards_enterpriseoneMatch8.9.18
oraclejd_edwards_enterpriseoneMatch8.98.1.4
oraclejd_edwards_enterpriseoneMatch8.98.2.1
oraclejd_edwards_enterpriseone_epMatch8.9
oracleoneworld_toolsRange≤24.1.3
oraclepeoplesoft_and_jdedwards_product_suiteMatch8.9
oraclepeoplesoft_and_jdedwards_product_suiteMatch8.9bundle23
oraclepeoplesoft_and_jdedwards_product_suiteMatch8.9bundle37
oraclepeoplesoft_and_jdedwards_product_suiteMatch8.9bundle38
oraclepeoplesoft_and_jdedwards_product_suiteMatch8.9bundle41
oraclepeoplesoft_and_jdedwards_product_suiteMatch8.9gp_2010-e
oraclepeoplesoft_and_jdedwards_product_suiteMatch8.98.4.1
oraclepeoplesoft_and_jdedwards_suite_scmMatch8.9bundle37
ParameterPositionPathDescriptionCWE
jdemafjasFromquery paramjde/JASMafletMafBrowserClose.mafServiceCross-site scripting vulnerability in JD Edwards EnterpriseOne Tools via JASMafletMafBrowserClose.mafService to inject script through jdemafjasLinkTarget parameter.
e1.modequery paramjde/JASMafletMafBrowserClose.mafServiceCross-site scripting vulnerability in JD Edwards EnterpriseOne Tools via JASMafletMafBrowserClose.mafService to inject script through jdemafjasLinkTarget parameter.
jdeLoginActionquery paramjde/JASMafletMafBrowserClose.mafServiceCross-site scripting vulnerability in JD Edwards EnterpriseOne Tools via JASMafletMafBrowserClose.mafService to inject script through jdemafjasLinkTarget parameter.
e1.statequery paramjde/JASMafletMafBrowserClose.mafServiceCross-site scripting vulnerability in JD Edwards EnterpriseOne Tools via JASMafletMafBrowserClose.mafService to inject script through jdemafjasLinkTarget parameter.
jdemafjasLinkTargetquery paramjde/JASMafletMafBrowserClose.mafServiceCross-site scripting vulnerability in JD Edwards EnterpriseOne Tools via JASMafletMafBrowserClose.mafService to inject script through jdemafjasLinkTarget parameter.
RENDER_MAFLETquery paramjde/JASMafletMafBrowserClose.mafServiceCross-site scripting vulnerability in JD Edwards EnterpriseOne Tools via JASMafletMafBrowserClose.mafService to inject script through jdemafjasLinkTarget parameter.
jdemafjasLauncherquery paramjde/JASMafletMafBrowserClose.mafServiceCross-site scripting vulnerability in JD Edwards EnterpriseOne Tools via JASMafletMafBrowserClose.mafService to inject script through jdemafjasLinkTarget parameter.
e1.servicequery paramjde/JASMafletMafBrowserClose.mafServiceCross-site scripting vulnerability in JD Edwards EnterpriseOne Tools via JASMafletMafBrowserClose.mafService to inject script through jdemafjasLinkTarget parameter.
e1.namespacequery paramjde/JASMafletMafBrowserClose.mafServiceCross-site scripting vulnerability in JD Edwards EnterpriseOne Tools via JASMafletMafBrowserClose.mafService to inject script through jdemafjasLinkTarget parameter.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jun 2026 23:28Current
5.8Medium risk
Vulners AI Score5.8
CVSS 23.5
EPSS0.03403
cve-2011-0836oraclejd edwardsenterpriseone toolsoneworld toolsvulnerabilityintegrityremote authenticated usersnvd
64