CVE-2016-0423
7.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:C/I:C/A:P
6.6 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.4%
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Enterprise Infrastructure SEC.
Affected configurations
References
packetstormsecurity.com/files/138512/JD-Edwards-9.1-EnterpriseOne-Server-JDENET-Denial-Of-Service.html
seclists.org/fulldisclosure/2016/Aug/128
www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
www.securitytracker.com/id/1034722
www.onapsis.com/research/security-advisories/jd-edwards-jdenet-end-file-dos
Related
7.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:C/I:C/A:P
6.6 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.4%