CVE-2022-21532

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator. Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2022-21532

CVE-2022-21532 affects Oracle JD Edwards EnterpriseOne Orchestrator (component E1 IOT Orchestrator). Affected versions are 9.2.6.3 and prior. The vulnerability permits a low-privilege, network-accessible attacker over HTTP to read a subset of data from the Orchestrator due to an input/validation ...