CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1330 matches found

NVD•added 2021/07/21 3:15 p.m.•36 views

CVE-2021-2373

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and Prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

5.4CVSS0.00511EPSS

SaveExploits0References1

Prion•added 2021/07/21 3:15 p.m.•23 views

Code injection

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

5.8CVSS5.9AI score0.01032EPSS

SaveExploits0References1Affected Software1

attackerkb•added 2021/07/21 3:15 p.m.•10 views

CVE-2021-2375

6.1CVSS6.7AI score0.01032EPSS

SaveExploits0References2Affected Software1

attackerkb•added 2021/07/21 3:15 p.m.•10 views

CVE-2021-2373

5.4CVSS6.5AI score0.00511EPSS

SaveExploits0References2Affected Software1

Prion•added 2021/07/21 3:15 p.m.•23 views

Code injection

4.9CVSS5.2AI score0.00511EPSS

SaveExploits0References1Affected Software1

CNVD•added 2021/07/21 12:00 a.m.•58 views

Oracle JD Edwards EnterpriseOne Tools has an unspecified vulnerability (CNVD-2021-54681)

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update and manage JD Edwards EnterpriseOne applications. An unspecified vulnerability exist...

5.4CVSS2.2AI score0.00511EPSS

SaveExploits0References1

CNVD•added 2021/07/21 12:00 a.m.•33 views

Oracle JD Edwards EnterpriseOne Tools has an unspecified vulnerability (CNVD-2021-54682)

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update, and manage JD Edwards EnterpriseOne applications. jD Edwards in Oracle JD Edwards A...

6.1CVSS2.2AI score0.01032EPSS

SaveExploits0References1

NCSC•added 2021/07/21 12:00 a.m.•16 views

Vulnerabilities fixed in Oracle JD Edwards

Oracle has fixed vulnerabilities in JD Edwards EnterpriseOne Orchestrator and EnterpriseOne Tools. The vulnerabilities allow a malicious party potentially able to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication...

9.8CVSS8.5AI score0.1726EPSS

SaveExploits0

Vulnrichment•added 2021/07/20 10:43 p.m.•10 views

CVE-2021-2375

6.1CVSS6.3AI score0.01032EPSS

SaveExploits0References1

Cvelist•added 2021/07/20 10:43 p.m.•28 views

CVE-2021-2375

6.1CVSS6AI score0.01032EPSS

SaveExploits0References1

CVE•added 2021/07/20 10:43 p.m.•72 views

CVE-2021-2375

CVE-2021-2375 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) up to and including version 9.2.5.3. An unauthenticated attacker with network access via HTTP can compromise JD Edwards EnterpriseOne Tools; attacks require user interaction. Consequences include unauthorized update/insert/...

6.1CVSS5.6AI score0.01032EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2021/07/20 10:43 p.m.•14 views

CVE-2021-2373

5.4CVSS6AI score0.00511EPSS

SaveExploits0References1

Cvelist•added 2021/07/20 10:43 p.m.•37 views

CVE-2021-2373

5.4CVSS5.4AI score0.00511EPSS

SaveExploits0References1

CVE•added 2021/07/20 10:43 p.m.•76 views

CVE-2021-2373

CVE-2021-2373 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime component. Affected products/versions include JD Edwards EnterpriseOne Tools 9.2.5.3 and earlier. The issue enables a low-privileged, network-accessible attacker (HTTP) to compromise data in th...

5.4CVSS4.8AI score0.00511EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2021/07/20 12:00 a.m.•6 views

CVE-2021-2373: Undefined Security Weakness

5.4CVSS5.7AI score0.00511EPSS

SaveExploits0References1

CNNVD•added 2021/07/20 12:00 a.m.•19 views

Oracle JD Edwards Products 访问控制错误漏洞

5.4CVSS8.4AI score0.00511EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2021/07/20 12:00 a.m.•4 views

CVE-2021-2375: Undefined Security Weakness

6.1CVSS5.7AI score0.01032EPSS

SaveExploits0References1

Positive Technologies•added 2021/07/20 12:00 a.m.•0 views

PT-2021-7132

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions 9.2.5.3 and Prior Description The issue is related to insufficient input validation in the Web Runtime component of JD Edwards EnterpriseOne Tools. This allows a low-privileged attacker with network acce...

5.4CVSS0.00511EPSS

SaveExploits0References6

Positive Technologies•added 2021/07/20 12:00 a.m.•2 views

PT-2021-7205

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions 9.2.5.3 and prior Description The issue is related to insufficient input validation in the Web Runtime component. It allows an unauthenticated attacker with network access via HTTP to compromise JD Edwar...

6.1CVSS0.01032EPSS

SaveExploits0References4

CNNVD•added 2021/07/20 12:00 a.m.•17 views

Oracle JD Edwards Products安全漏洞

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update, and manage JD Edwards EnterpriseOne applications. jD Edwards in Oracle JD Edwards A...

6.1CVSS5.7AI score0.01032EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by