Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524...

CVE-2011-2325

Oracle JD Edwards sawkernel/JDENet vulnerability CVE-2011-2325 affects the JD Edwards 9.0 EnterpriseOne Server + EnterpriseOne Tools 8.98 (and older variants). A specially crafted packet to the JDENET/SAW kernel could disclose system credentials (passwords) and other confidential data, enabling r...