CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

963 matches found

OSV•added 2021/07/21 3:15 p.m.•7 views

CVE-2021-2375

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

6.1CVSS7.3AI score0.01032EPSS

SaveExploits0References1

NVD•added 2021/07/21 3:15 p.m.•14 views

CVE-2021-2375

6.1CVSS0.01032EPSS

SaveExploits0References1

OSV•added 2021/07/21 3:15 p.m.•7 views

CVE-2021-2373

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and Prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

5.4CVSS6.7AI score0.00511EPSS

SaveExploits0References1

NVD•added 2021/07/21 3:15 p.m.•25 views

CVE-2021-2373

5.4CVSS0.00511EPSS

SaveExploits0References1

Prion•added 2021/07/21 3:15 p.m.•18 views

Code injection

4.9CVSS5.2AI score0.00511EPSS

SaveExploits0References1Affected Software1

Prion•added 2021/07/21 3:15 p.m.•16 views

Code injection

5.8CVSS5.9AI score0.01032EPSS

SaveExploits0References1Affected Software1

ATTACKERKB•added 2021/07/21 3:15 p.m.•5 views

CVE-2021-2373

5.4CVSS6.5AI score0.00511EPSS

SaveExploits0References2Affected Software1

ATTACKERKB•added 2021/07/21 3:15 p.m.•7 views

CVE-2021-2375

6.1CVSS6.7AI score0.01032EPSS

SaveExploits0References2Affected Software1

NCSC•added 2021/07/21 12:00 a.m.•9 views

Vulnerabilities fixed in Oracle JD Edwards

Oracle has fixed vulnerabilities in JD Edwards EnterpriseOne Orchestrator and EnterpriseOne Tools. The vulnerabilities allow a malicious party potentially able to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication...

9.8CVSS8.5AI score0.17611EPSS

SaveExploits0

CNVD•added 2021/07/21 12:00 a.m.•52 views

Oracle JD Edwards EnterpriseOne Tools has an unspecified vulnerability (CNVD-2021-54681)

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update and manage JD Edwards EnterpriseOne applications. An unspecified vulnerability exist...

5.4CVSS2.2AI score0.00511EPSS

SaveExploits0References1

CNVD•added 2021/07/21 12:00 a.m.•27 views

Oracle JD Edwards EnterpriseOne Tools has an unspecified vulnerability (CNVD-2021-54682)

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update, and manage JD Edwards EnterpriseOne applications. jD Edwards in Oracle JD Edwards A...

6.1CVSS2.2AI score0.01032EPSS

SaveExploits0References1

Vulnrichment•added 2021/07/20 10:43 p.m.•8 views

CVE-2021-2375

6.1CVSS6.3AI score0.01032EPSS

SaveExploits0References1

CVE•added 2021/07/20 10:43 p.m.•54 views

CVE-2021-2375

CVE-2021-2375 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) up to and including version 9.2.5.3. An unauthenticated attacker with network access via HTTP can compromise JD Edwards EnterpriseOne Tools; attacks require user interaction. Consequences include unauthorized update/insert/...

6.1CVSS5.6AI score0.01032EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2021/07/20 10:43 p.m.•20 views

CVE-2021-2375

6.1CVSS6AI score0.01032EPSS

SaveExploits0References1

Cvelist•added 2021/07/20 10:43 p.m.•30 views

CVE-2021-2373

5.4CVSS5.4AI score0.00511EPSS

SaveExploits0References1

CVE•added 2021/07/20 10:43 p.m.•61 views

CVE-2021-2373

CVE-2021-2373 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime component. Affected products/versions include JD Edwards EnterpriseOne Tools 9.2.5.3 and earlier. The issue enables a low-privileged, network-accessible attacker (HTTP) to compromise data in th...

5.4CVSS4.8AI score0.00511EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2021/07/20 10:43 p.m.•12 views

CVE-2021-2373

5.4CVSS6AI score0.00511EPSS

SaveExploits0References1

CNNVD•added 2021/07/20 12:00 a.m.•12 views

Oracle JD Edwards Products 访问控制错误漏洞

5.4CVSS8.4AI score0.00511EPSS

SaveExploits0References3

CNNVD•added 2021/07/20 12:00 a.m.•10 views

Oracle JD Edwards Products安全漏洞

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update, and manage JD Edwards EnterpriseOne applications. jD Edwards in Oracle JD Edwards A...

6.1CVSS5.7AI score0.01032EPSS

SaveExploits0References3

RedHat Linux•added 2021/06/07 10:40 p.m.•11 views

nettle: Out of bounds memory access in signature verification

A flaw was found in Nettle, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an...

8.1CVSS6.8AI score0.01687EPSS

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by