CVE-2021-2052

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. The supported version that is affected is Prior to 9.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...

CVE-2021-2052

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. The supported version that is affected is Prior to 9.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...

CVE-2021-2052

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. The supported version that is affected is Prior to 9.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...

CVE-2021-2052

CVE-2021-2052 affects Oracle JD Edwards EnterpriseOne Orchestrator (E1 IOT Orchestrator Security). Affected versions are prior to 9.2.5.1. The impact described across sources is unauthenticated, network-accessible read access to a subset of data via HTTP. The vulnerability is tied to the JD Edwar...

CVE-2021-2052: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. The supported version that is affected is Prior to 9.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...

PT-2021-1724

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Orchestrator versions prior to 9.2.5.1 Description: The issue is related to inadequate access control in the E1 IOT Orchestrator Security component. It allows an unauthenticated attacker with network access via HTTP t...

Oracle JD Edwards 组件安全漏洞

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle Corporation that provides application modules for financial management, project management, and asset lifecycle management. An information disclosure vulnerability exists in the E1...

Unspecified Vulnerability in Oracle JD Edwards EnterpriseOne Tools (CNVD-2020-27996)

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle Corporation. The products provide application modules for financial management, project management, and asset lifecycle management.JD Edwards EnterpriseOne Tools is one of the...

Code injection

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Monitoring and Diagnostics. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

CVE-2020-2733

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Monitoring and Diagnostics. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

CVE-2020-2733

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Monitoring and Diagnostics. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

CVE-2020-2733

CVE-2020-2733 affects Oracle JD Edwards EnterpriseOne Tools 9.2, specifically the Monitoring and Diagnostics component. The Nuclei template confirms a network-accessible information-disclosure vulnerability in this component, where an attacker with HTTP access could obtain sensitive information a...

CVE-2020-2733: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Monitoring and Diagnostics. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

PT-2020-3471 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools version 9.2 Description: The issue is related to inadequate access control in the Monitoring and Diagnostics component of JD Edwards EnterpriseOne Tools, allowing an unauthenticated attacker with network access...

The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system allows a hacker to disclose protected information.

The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information using the HTTP protocol...

CVE-2019-2564

CVE-2019-2564 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime subcomponent) with the 9.2 line. The vulnerability, as described in multiple sources, allows a low-privileged attacker who can reach the system over HTTP to read data from JD Edwards EnterpriseOne Tools, indicating a confide...

CVE-2019-2564

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

CVE-2019-2564: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

PT-2019-3115

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools version 9.2 Description The issue is related to inadequate access control in the Web Runtime component of JD Edwards EnterpriseOne Tools, allowing a low-privileged attacker with network access via HTTP to...

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...