EUVD-2019-12205

Malware in sbrugna...

The vulnerability of the Service Enablement component in the JD Edwards World Technical Foundation software package allows a malicious individual to gain unauthorized access to protected data.

The vulnerability of the Service Enablement component in the JD Edwards World Technical Foundation package is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Code injection

Vulnerability in the JD Edwards World Technical Foundation component of Oracle JD Edwards Products subcomponent: Service Enablement. Supported versions that are affected are A9.2, A9.3.1 and A9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Oracle JD Edwards Products JD Edwards World Technical Foundation Access Control Error Vulnerability

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle. The product provides financial management, project management and asset lifecycle management application modules. A security vulnerability exists in the Service Enablement...