CVE-2011-2326

CVE-2011-2326 affects Oracle JD Edwards EnterpriseOne components (Server + Tools 8.98, SP 24) and is tied to the JDENet/SAW kernel. A crafted JDENet packet to the JDENet Service enables remote access to information relevant to system confidentiality, per Onapsis-reported details, with the root ca...

CVE-2011-2324

Vulnerability CVE-2011-2324 affects Oracle JD Edwards EnterpriseOne Tools JDENET (JD Edwards 8.98 SP 24). The vendor/affected component is JDENET within EnterpriseOne Tools; the root cause is a Denial-of-Service condition triggered by processing packets of a specific size, consuming CPU time and ...

CVE-2011-2321

CVE-2011-2321 relates to Oracle JD Edwards JDENET/EnterpriseOne Tools 8.98 SP24. The Onapsis advisory describes an information disclosure vulnerability in JDENET, enabling an attacker to retrieve system configuration details (kernel/process information) via the JDENET service. The issue affects J...

CVE-2011-3509

CVE-2011-3509 affects Oracle JD Edwards 8.98 SP 24 (EnterpriseOne Tools) and is tied to the JDENet/SAW kernel information flow in the EnterpriseOne Tools stack. The vulnerability involves the JDENet/SAW kernel components, allowing a remote attacker to access confidential information related to th...

CVE-2011-3514

CVE-2011-3514 affects Oracle JD Edwards EnterpriseOne Tools (JD Edwards 8.98 SP 24 / JD Edwards EnterpriseOne Server + Tools 9.0/8.98) via the JDENET SAW kernel. A specially crafted JDENET message can remotely modify the JDE.INI configuration file, enabling remote compromise of the ERP system. Ex...

CVE-2011-2325

Oracle JD Edwards sawkernel/JDENet vulnerability CVE-2011-2325 affects the JD Edwards 9.0 EnterpriseOne Server + EnterpriseOne Tools 8.98 (and older variants). A specially crafted packet to the JDENET/SAW kernel could disclose system credentials (passwords) and other confidential data, enabling r...

CVE-2011-3524

CVE-2011-3524 is an unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools that affects confidentiality via the JDENet/SAW kernel. Connected Onapsis advisories (mapping to CVE-2011-3524) describe information-disclosure flaws in the JD Edwards JDENet service/Saw kernel where specially ...

CVE-2014-6516

CVE-2014-6516 is described as an unspecified vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products 8.98. The affected element is the JD Edwards EnterpriseOne Tools component; root cause details are not provided in the available documents. Impact is stated as ...

CVE-2015-4919

Technical details about CVE-2015-4919 are not publicly provided in the supplied documents. No concrete root cause, affected products/versions, or fixes are described here. Monitor for future updates from official advisories.

CVE-2016-0424

Technical details for CVE-2016-0424 are not provided in the connected documents. Public descriptions mention an unspecified vulnerability affecting JD Edwards EnterpriseOne Tools 9.1/9.2, with DoS-like impact; monitor for updates and official advisories.

CVE-2011-2317

CVE-2011-2317 affects Oracle JD Edwards JDENET/EnterpriseOne Tools 8.98 SP 24. Affected component: JD ENET/Tools in JD Edwards EnterpriseOne. Root cause: Arbitrary file write via a crafted File Packet sent to the JDENet port (default 6015), enabling a remote attacker to save files on the server. ...

CVE-2012-1678

The CVE-2012-1678 entry concerns an unspecified vulnerability in the JD Edwards EnterpriseOne Tools component within Oracle JD Edwards Products 8.98, 9.1, and 24. It allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC. The connected sources confir...

CVE-2016-0423

CVE-2016-0423 concerns Oracle JD Edwards EnterpriseOne Tools, specifically the Enterprise Infrastructure SEC component. Connected sources corroborate a vulnerability in the JD Edwards EnterpriseOne Tools/Enterprise Infrastructure SEC that could allow remote attackers to impact confidentiality, in...

CVE-2016-0420

CVE-2016-0420 affects Oracle JD Edwards EnterpriseOne Tools Monitoring and Diagnostics component (Oracle JD Edwards EnterpriseOne 9.1/9.2). A denial-of-service vulnerability exists in this component that could be exploited remotely to cause a DoS, impacting availability. The CNVD entry explicitly...

CVE-2015-0475

CVE-2015-0475 bases on an Oracle JD Edwards EnterpriseOne Technology vulnerability in the Web Runtime Security subcomponent of JD Edwards Products 9.1. CNVD-2015-02642 describes a remote-authenticated path that can read data and compromise confidentiality via this subcomponent. NVD notes an unspe...

CVE-2016-0425

Technical details about CVE-2016-0425 are not publicly available in the provided connected documents; no affected products, versions, vectors, or fixes are specified. Monitor for updates.

CVE-2016-0421

CVE-2016-0421 is linked to Oracle JD Edwards EnterpriseOne Tools Monitoring and Diagnostics SEC component (affecting JD Edwards EnterpriseOne 9.1/9.2). Connected documents describe an unspecified vulnerability that could enable remote attackers to cause a denial-of-service, access data, and modif...

CVE-2016-0422

CVE-2016-0422 is described across connected data as an unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC component. Several CNVD entries (CNVD-2016-00688/00687) and related records frame it as a denial-of-service risk affecting availability, attribut...