919 matches found
CVE-2011-3514
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC JDENET...
Design/Logic Flaw
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastucture SEC JDNET...
Code injection
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3524...
Design/Logic Flaw
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC JDENET...
Code injection
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDNET...
Code injection
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC JDENET...
Code injection
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524...
Code injection
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3509...
Code injection
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524...
CVE-2011-3524
CVE-2011-3524 is an unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools that affects confidentiality via the JDENet/SAW kernel. Connected Onapsis advisories (mapping to CVE-2011-3524) describe information-disclosure flaws in the JD Edwards JDENet service/Saw kernel where specially ...
CVE-2011-3509
CVE-2011-3509 affects Oracle JD Edwards 8.98 SP 24 (EnterpriseOne Tools) and is tied to the JDENet/SAW kernel information flow in the EnterpriseOne Tools stack. The vulnerability involves the JDENet/SAW kernel components, allowing a remote attacker to access confidential information related to th...
CVE-2011-3514
CVE-2011-3514 affects Oracle JD Edwards EnterpriseOne Tools (JD Edwards 8.98 SP 24 / JD Edwards EnterpriseOne Server + Tools 9.0/8.98) via the JDENET SAW kernel. A specially crafted JDENET message can remotely modify the JDE.INI configuration file, enabling remote compromise of the ERP system. Ex...
CVE-2011-2326
CVE-2011-2326 affects Oracle JD Edwards EnterpriseOne components (Server + Tools 8.98, SP 24) and is tied to the JDENet/SAW kernel. A crafted JDENet packet to the JDENet Service enables remote access to information relevant to system confidentiality, per Onapsis-reported details, with the root ca...
CVE-2011-3524
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3509...
CVE-2011-2317
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastucture SEC JDNET...
CVE-2011-2326
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524...
CVE-2011-2321
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDNET...
CVE-2011-3509
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3524...
CVE-2011-2317
CVE-2011-2317 affects Oracle JD Edwards JDENET/EnterpriseOne Tools 8.98 SP 24. Affected component: JD ENET/Tools in JD Edwards EnterpriseOne. Root cause: Arbitrary file write via a crafted File Packet sent to the JDENet port (default 6015), enabling a remote attacker to save files on the server. ...
CVE-2011-3514
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC JDENET...