281 matches found
PT-2022-2425
Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions prior to 9.2.6.3 Description The issue exists due to insufficient input validation in the Web Runtime component of JD Edwards EnterpriseOne Tools. This allows a remote attacker to compromise the system,...
CVE-2021-2375
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...
CVE-2021-2373
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and Prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...
CVE-2021-2373
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and Prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...
Code injection
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...
CVE-2021-2375
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...
Code injection
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and Prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...
Oracle JD Edwards EnterpriseOne Tools has an unspecified vulnerability (CNVD-2021-54682)
Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update, and manage JD Edwards EnterpriseOne applications. jD Edwards in Oracle JD Edwards A...
Oracle JD Edwards EnterpriseOne Tools has an unspecified vulnerability (CNVD-2021-54681)
Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update and manage JD Edwards EnterpriseOne applications. An unspecified vulnerability exist...
CVE-2021-2375
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...
CVE-2021-2375
CVE-2021-2375 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) up to and including version 9.2.5.3. An unauthenticated attacker with network access via HTTP can compromise JD Edwards EnterpriseOne Tools; attacks require user interaction. Consequences include unauthorized update/insert/...
CVE-2021-2373
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and Prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...
CVE-2021-2373
CVE-2021-2373 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime component. Affected products/versions include JD Edwards EnterpriseOne Tools 9.2.5.3 and earlier. The issue enables a low-privileged, network-accessible attacker (HTTP) to compromise data in th...
PT-2021-7132
Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions 9.2.5.3 and Prior Description The issue is related to insufficient input validation in the Web Runtime component of JD Edwards EnterpriseOne Tools. This allows a low-privileged attacker with network acce...
Oracle JD Edwards Products Access Control Vulnerability
Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update and manage JD Edwards EnterpriseOne applications. An unspecified vulnerability exist...
CVE-2021-2375: Undefined Security Weakness
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...
CVE-2021-2373: Undefined Security Weakness
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and Prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...
PT-2021-7205
Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions 9.2.5.3 and prior Description The issue is related to insufficient input validation in the Web Runtime component. It allows an unauthenticated attacker with network access via HTTP to compromise JD Edwar...
Oracle JD Edwards Products security vulnerabilities
Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update, and manage JD Edwards EnterpriseOne applications. jD Edwards in Oracle JD Edwards A...
Web Runtime Disclosure Protected Information
The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information using the HTTP protocol...