Lucene search
+L

106 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/05 12:00 a.m.10 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools, a resource management system for enterprises, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.8CVSS7.2AI score0.00343EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/04/15 9:16 p.m.54 views

CVE-2025-30740

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

6.5CVSS0.00343EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/15 9:16 p.m.9 views

CVE-2025-30740

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

6.5CVSS5.8AI score0.00343EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/15 9:16 p.m.11 views

CVE-2025-30709

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

6.1CVSS7.1AI score0.00391EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/15 12:00 a.m.11 views

Oracle JD Edwards EnterpriseOne Tools 安全漏洞

Oracle JD Edwards EnterpriseOne Tools is a component for installing, updating, and managing JD Edwards EnterpriseOne applications from Oracle Corporation Oracle. A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.9.2, which stems from improper...

5.4CVSS7.1AI score0.0034EPSS
SaveExploits0References2
Amazon
Amazon
added 2025/04/01 12:00 a.m.13 views

Medium: containerd

Issue Overview: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container...

4.6CVSS5.2AI score0.00294EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2025/03/17 12:00 a.m.7 views

PT-2025-11557

Name of the Vulnerable Software and Affected Versions containerd versions prior to 1.6.38 containerd versions prior to 1.7.27 containerd versions prior to 2.0.4 Description A bug was found in containerd where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed...

7.8CVSS7.3AI score0.00294EPSS
SaveExploits1References76
Wiz blog
Wiz blog
added 2025/02/17 12:00 p.m.5 views

The Role of Runtime Security in Cloud Environments

Discover how Wiz's innovative hybrid approach revolutionizes runtime security for the modern cloud era...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.11 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools, a resource management system for enterprises, allows attackers to disclose protected information.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information through a specially...

7.8CVSS7.6AI score0.00317EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.16 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools, a resource management system for enterprises, allows attackers to disclose protected information.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to the disclosure of information through incompatibility. Exploitation of this vulnerability can allow an attacker, operating remotely, to disclose sensitive information through HTTP requests...

7.8CVSS7.6AI score0.00677EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.12 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for managing enterprise resources allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to the lack of authenticity verification for a critical function. Exploitation of this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, a...

9CVSS7.7AI score0.00666EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:00 a.m.9 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete data.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves the use of open redirection. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to data...

6.4CVSS7.7AI score0.00383EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:00 a.m.12 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete files.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to gain access to read, modify, and delete files...

4.3CVSS7.7AI score0.00405EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:00 a.m.13 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system, which allows a hacker to trigger a service failure.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS7.7AI score0.00686EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:00 a.m.11 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system, which allows a hacker to trigger a service failure.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS7.7AI score0.00686EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:00 a.m.14 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools, a resource management system for enterprises, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

5.3CVSS7.7AI score0.00495EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/01/21 9:15 p.m.10 views

CVE-2025-21538

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are Prior to 9.2.9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

6.1CVSS5.8AI score0.00189EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/21 9:15 p.m.7 views

CVE-2025-21509

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

6.5CVSS5.8AI score0.00686EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/21 9:15 p.m.9 views

CVE-2025-21514

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

5.3CVSS5.8AI score0.00495EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/21 9:15 p.m.9 views

CVE-2025-21513

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

6.1CVSS5.8AI score0.002EPSS
SaveExploits0References1
Rows per page
Query Builder