CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

918 matches found

CNNVD•added 2022/04/19 12:00 a.m.•8 views

Oracle JD Edwards Products输入验证错误漏洞

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. A security vulnerability exists in Oracle JD Edwards Products that could result in unauthorized update, insert, or delete access to certain JD Edwards EnterpriseOne...

6.1CVSS7.8AI score0.00803EPSS

SaveExploits0References4

CNNVD•added 2022/04/19 12:00 a.m.•14 views

Oracle JD Edwards Products 输入验证错误漏洞

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle. The products provide application modules for financial management, project management, and asset lifecycle management. A security vulnerability exists in Oracle JD Edwards Products...

8.2CVSS7.8AI score0.02089EPSS

SaveExploits0References4

NCSC•added 2022/01/19 12:00 a.m.•8 views

Vulnerability fixed in Oracle JD Edwards EnterpriseOne Tools

Oracle has fixed a vulnerability in JD Edwards EnterpriseOne Tools. ------------------.------.------------------------------------- | CVE ID | CVSS | Vector |. |------------------|------|-------------------------------------| | CVE-2021-23337 | 7.2 | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |...

7.2CVSS7.4AI score0.21333EPSS

SaveExploits3

NCSC•added 2021/10/20 12:00 a.m.•8 views

Vulnerabilities fixed in Oracle JD Edwards

Oracle has fixed vulnerabilities in the following JD Edwards products: JD Edwards EnterpriseOne Tools JD Edwards World Security JD Edwards EnterpriseOne Orchestrator The vulnerabilities potentially enable a malicious party to execute attacks that result in the following categories of damage:...

7.5CVSS7.3AI score0.32362EPSS

SaveExploits5

OSV•added 2021/07/21 3:15 p.m.•8 views

CVE-2021-2375

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

6.1CVSS7.3AI score0.01032EPSS

SaveExploits0References1

NVD•added 2021/07/21 3:15 p.m.•16 views

CVE-2021-2375

6.1CVSS0.01032EPSS

SaveExploits0References1

OSV•added 2021/07/21 3:15 p.m.•7 views

CVE-2021-2373

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and Prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

5.4CVSS6.7AI score0.00511EPSS

SaveExploits0References1

NVD•added 2021/07/21 3:15 p.m.•25 views

CVE-2021-2373

5.4CVSS0.00511EPSS

SaveExploits0References1

Prion•added 2021/07/21 3:15 p.m.•18 views

Code injection

4.9CVSS5.2AI score0.00511EPSS

SaveExploits0References1Affected Software1

ATTACKERKB•added 2021/07/21 3:15 p.m.•5 views

CVE-2021-2373

5.4CVSS6.5AI score0.00511EPSS

SaveExploits0References2Affected Software1

ATTACKERKB•added 2021/07/21 3:15 p.m.•7 views

CVE-2021-2375

6.1CVSS6.7AI score0.01032EPSS

SaveExploits0References2Affected Software1

Prion•added 2021/07/21 3:15 p.m.•16 views

Code injection

5.8CVSS5.9AI score0.01032EPSS

SaveExploits0References1Affected Software1

NCSC•added 2021/07/21 12:00 a.m.•9 views

Vulnerabilities fixed in Oracle JD Edwards

Oracle has fixed vulnerabilities in JD Edwards EnterpriseOne Orchestrator and EnterpriseOne Tools. The vulnerabilities allow a malicious party potentially able to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication...

9.8CVSS8.5AI score0.17814EPSS

SaveExploits0

CNVD•added 2021/07/21 12:00 a.m.•28 views

Oracle JD Edwards EnterpriseOne Tools has an unspecified vulnerability (CNVD-2021-54682)

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update, and manage JD Edwards EnterpriseOne applications. jD Edwards in Oracle JD Edwards A...

6.1CVSS2.2AI score0.01032EPSS

SaveExploits0References1

CNVD•added 2021/07/21 12:00 a.m.•52 views

Oracle JD Edwards EnterpriseOne Tools has an unspecified vulnerability (CNVD-2021-54681)

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update and manage JD Edwards EnterpriseOne applications. An unspecified vulnerability exist...

5.4CVSS2.2AI score0.00511EPSS

SaveExploits0References1

Vulnrichment•added 2021/07/20 10:43 p.m.•8 views

CVE-2021-2375

6.1CVSS6.3AI score0.01032EPSS

SaveExploits0References1

Cvelist•added 2021/07/20 10:43 p.m.•22 views

CVE-2021-2375

6.1CVSS6AI score0.01032EPSS

SaveExploits0References1

CVE•added 2021/07/20 10:43 p.m.•58 views

CVE-2021-2375

CVE-2021-2375 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) up to and including version 9.2.5.3. An unauthenticated attacker with network access via HTTP can compromise JD Edwards EnterpriseOne Tools; attacks require user interaction. Consequences include unauthorized update/insert/...

6.1CVSS5.6AI score0.01032EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2021/07/20 10:43 p.m.•30 views

CVE-2021-2373

5.4CVSS5.4AI score0.00511EPSS

SaveExploits0References1

CVE•added 2021/07/20 10:43 p.m.•63 views

CVE-2021-2373

CVE-2021-2373 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime component. Affected products/versions include JD Edwards EnterpriseOne Tools 9.2.5.3 and earlier. The issue enables a low-privileged, network-accessible attacker (HTTP) to compromise data in th...

5.4CVSS4.8AI score0.00511EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by