CVE-2018-2945

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-2946

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-2947

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

CVE-2018-2950

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-2947

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

CVE-2018-2949

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-2950

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-2999

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-3006

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-2945

CVE-2018-2945 concerns Oracle JD Edwards EnterpriseOne Tools (Web Runtime) 9.2. Affected component: Web Runtime within JD Edwards EnterpriseOne Tools. Root cause and impact: unauthenticated network access via HTTP can lead to unauthorized update/insert/delete and read access to some JD Edwards En...

CVE-2018-2999

CVE-2018-2999 affects Oracle JD Edwards EnterpriseOne Tools Web Runtime (JD Edwards EnterpriseOne Tools, v9.2). An unauthenticated, network-accessible attacker via HTTP can compromise data; attacks require user interaction and may lead to unauthorized update/insert/delete as well as read access t...

CVE-2018-2946

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-2944

CVE-2018-2944 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Monitoring and Diagnostics subcomponent, with affected version 9.2. The vulnerability allows an unauthenticated attacker with network access over HTTP to access or compromise data in JD Edwards EnterpriseOne Tools. The ...

CVE-2018-2947

CVE-2018-2947 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) 9.2. Affected component: Web Runtime in JD Edwards Tools. Root cause: vulnerability in the Tools stack enabling network access via HTTP to attacker with low privileges. Impact: unauthorized access to JD Edwards EnterpriseOn...

CVE-2018-2948

CVE-2018-2948 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) 9.2. An unauthenticated, network-accessible HTTP vulnerability allows data modification and reads via JD Edwards EnterpriseOne Tools, with user interaction required and impact on related products. Root cause and exact explo...

CVE-2018-2949

CVE-2018-2949 affects Oracle JD Edwards EnterpriseOne Tools, Web Runtime subcomponent, in JD Edwards EnterpriseOne Tools 9.2. An unauthenticated, network-accessible attacker can exploit via HTTP to gain unauthorized read and modify access to data in JD Edwards Tools, with user interaction require...

CVE-2018-2950

CVE-2018-2950 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) with a vulnerable 9.2 Web Runtime component. The vulnerability allows unauthenticated, network-based access via HTTP to compromise data; successful exploitation requires human interaction and can lead to unauthorized read, ...

CVE-2018-3006

CVE-2018-3006 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime subcomponent) for version 9.2. It is an unauthenticated, network-access vulnerability over HTTP; attacks require user interaction but may lead to unauthorized update/insert/delete and read access on JD Edwards EnterpriseOne ...

CVE-2018-2948

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-2944

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Monitoring and Diagnostics. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwar...