CVE-2016-0420

CVE-2016-0420 affects Oracle JD Edwards EnterpriseOne Tools Monitoring and Diagnostics component (Oracle JD Edwards EnterpriseOne 9.1/9.2). A denial-of-service vulnerability exists in this component that could be exploited remotely to cause a DoS, impacting availability. The CNVD entry explicitly...

CVE-2016-0422

CVE-2016-0422 is described across connected data as an unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC component. Several CNVD entries (CNVD-2016-00688/00687) and related records frame it as a denial-of-service risk affecting availability, attribut...

CVE-2016-0424

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0422...

CVE-2016-0425

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Monitoring and Diagnostics...

Oracle JD Edwards EnterpriseOne Technology Remote Vulnerability

Oracle JD Edwards EnterpriseOne is a fully integrated suite of enterprise resource planning management software that provides application modules for financial management, project management and asset lifecycle management. A security vulnerability exists in the Web Runtime Security subcomponent o...

CVE-2015-0475

Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security...

Design/Logic Flaw

Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security...

CVE-2015-0475

CVE-2015-0475 bases on an Oracle JD Edwards EnterpriseOne Technology vulnerability in the Web Runtime Security subcomponent of JD Edwards Products 9.1. CNVD-2015-02642 describes a remote-authenticated path that can read data and compromise confidentiality via this subcomponent. NVD notes an unspe...

CVE-2015-0475

Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security...

Unspecified Vulnerability in Oracle JD Edwards EnterpriseOne Tools Component

Oracle JD Edwards EnterpriseOne is a fully integrated suite of enterprise resource planning ERP management software that combines business value, standards-based technology, and deep industry experience into a low TCO business solution. A security vulnerability in the Portal SEC child of the Orac...

CVE-2014-6565

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC...

Code injection

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC...

CVE-2014-6565

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC...

CVE-2014-6565

CVE-2014-6565 relates to Oracle JD Edwards EnterpriseOne Tools component (JD Edwards Products 9.1.5). Connected sources indicate a vulnerability in the Portal SEC area of the Tools component that could allow remote attackers to affect confidentiality, integrity, and availability. Practical impact...

Oracle Releases January 2015 Security Advisory

Oracle has released its Critical Patch Update for January 2015 to address 169 vulnerabilities across multiple products. This update contains the following security fixes: 8 for Oracle Database Server 36 for Oracle Fusion Middleware 10 for Oracle Enterprise Manager Grid Control 10 for Oracle...

CVE-2014-6516

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98 allows local users to affect confidentiality, integrity, and availability via vectors related to Installation SEC...

Code injection

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98 allows local users to affect confidentiality, integrity, and availability via vectors related to Installation SEC...

CVE-2014-6516

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98 allows local users to affect confidentiality, integrity, and availability via vectors related to Installation SEC...

CVE-2014-6516

CVE-2014-6516 is described as an unspecified vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products 8.98. The affected element is the JD Edwards EnterpriseOne Tools component; root cause details are not provided in the available documents. Impact is stated as ...

Oracle GENERATESCHEMA Buffer Overflow Exploit

This Exploit a buffer overflow in Oracle10g. When sending a specially formatted query to the GENERATESCHEMA function in the XDB.DBMSXMLSCHEMA package, an attacker may be able to execute arbitrary code. NOTE: For targets running DEP, you will need to choose target 0 then rexploit with target 1. Th...