4 matches found
CVE-2024-21150
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are Prior to 9.2.8.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...
6.1CVSS6.2AI score0.00309EPSS
SaveExploits0References1
CVE-2024-21150
...
6.1CVSS7AI score0.00309EPSS
SaveExploits0References1
CVE-2024-21150
...
6.1CVSS0.00309EPSS
SaveExploits0References1
CVE-2024-21150
CVE-2024-21150 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) with versions prior to 9.2.8.2. The issue arises from insufficient input validation in the Web Runtime SEC component, allowing an unauthenticated attacker with network access via HTTP to compromise the tools, potential...
6.1CVSS5.4AI score0.00309EPSS
SaveExploits0References1Affected Software1
20