CVE-2018-3006

CVE-2018-3006 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime subcomponent) for version 9.2. It is an unauthenticated, network-access vulnerability over HTTP; attacks require user interaction but may lead to unauthorized update/insert/delete and read access on JD Edwards EnterpriseOne ...