CVE-2016-0420

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics...

CVE-2015-4919

Technical details about CVE-2015-4919 are not publicly provided in the supplied documents. No concrete root cause, affected products/versions, or fixes are described here. Monitor for future updates from official advisories.

CVE-2016-0423

CVE-2016-0423 concerns Oracle JD Edwards EnterpriseOne Tools, specifically the Enterprise Infrastructure SEC component. Connected sources corroborate a vulnerability in the JD Edwards EnterpriseOne Tools/Enterprise Infrastructure SEC that could allow remote attackers to impact confidentiality, in...

Unspecified Vulnerability in Oracle JD Edwards EnterpriseOne Tools Component

Oracle JD Edwards EnterpriseOne is a fully integrated suite of enterprise resource planning ERP management software that combines business value, standards-based technology, and deep industry experience into a low TCO business solution. A security vulnerability in the Portal SEC child of the Orac...

CVE-2014-6565

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC...

Oracle GENERATESCHEMA Buffer Overflow Exploit

This Exploit a buffer overflow in Oracle10g. When sending a specially formatted query to the GENERATESCHEMA function in the XDB.DBMSXMLSCHEMA package, an attacker may be able to execute arbitrary code. NOTE: For targets running DEP, you will need to choose target 0 then rexploit with target 1. Th...

CVE-2012-1678

The CVE-2012-1678 entry concerns an unspecified vulnerability in the JD Edwards EnterpriseOne Tools component within Oracle JD Edwards Products 8.98, 9.1, and 24. It allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC. The connected sources confir...

CVE-2011-2324

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC JDENET...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3524...

Design/Logic Flaw

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastucture SEC JDNET...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDNET...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC JDENET...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3509...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524...

CVE-2011-2317

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastucture SEC JDNET...

CVE-2011-3509

CVE-2011-3509 affects Oracle JD Edwards 8.98 SP 24 (EnterpriseOne Tools) and is tied to the JDENet/SAW kernel information flow in the EnterpriseOne Tools stack. The vulnerability involves the JDENet/SAW kernel components, allowing a remote attacker to access confidential information related to th...

CVE-2011-2321

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDNET...

CVE-2011-2317

CVE-2011-2317 affects Oracle JD Edwards JDENET/EnterpriseOne Tools 8.98 SP 24. Affected component: JD ENET/Tools in JD Edwards EnterpriseOne. Root cause: Arbitrary file write via a crafted File Packet sent to the JDENet port (default 6015), enabling a remote attacker to save files on the server. ...

CVE-2011-2321

CVE-2011-2321 relates to Oracle JD Edwards JDENET/EnterpriseOne Tools 8.98 SP24. The Onapsis advisory describes an information disclosure vulnerability in JDENET, enabling an attacker to retrieve system configuration details (kernel/process information) via the JDENET service. The issue affects J...