PT-2025-62944

Impact Anyone using untrusted message components may be affected. On versions =6.0.0,6.1.3 of JDA, the requester will attempt to download external media URLs from components if they are used in an update or send request. If you are used MessagegetComponents or similar to get a list of components...

JDA Warehouse Management System Buffer Overflow / SQL Injection / XML Injection

Introduction ========= Multiple critical vulnerabilities were identified in JDA Warehouse management system WMS. The vulnerabilities were discovered during a black box security assessment and therefore the vulnerability list should not be considered exhaustive. Affected Software and Versions...

JDA Connect CSRF / Command Execution / Exposed JMX Service

Introduction ============ Multiple critical vulnerabilities were identified in JDA Connect. The vulnerabilities were discovered during a black box security assessment and therefore the vulnerability list should not be considered exhaustive. Affected Software and Versions...