JD Edwards EnterpriseOne Tools vulnerabilities

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Monitoring and Diagnostics SEC) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a high-privileged attacker with HTTP network access to compromise the product, and attacks may significantly impact additional products (scope change).

An unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability.

An unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC.

Vulnerability in JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with HTTPS network access can perform unauthorized modifications and gain access to critical data.

Vulnerability in JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with HTTP network access can perform unauthorized modifications and gain access to critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Web Runtime SEC). Affected versions are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.8.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security). Affected version is 9.2.26.3. A low-privileged attacker with network access via HTTP can compromise the tools, potentially impacting other products.

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle, concerning the installation security component. It allows an unauthenticated attacker with access to the infrastructure where JD Edwards EnterpriseOne Tools runs to compromise the tool.

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle allows a low privileged attacker with network access via HTTP to compromise JD Edwards Tools. Attacks may significantly impact additional products, changing the scope of the threat.

A vulnerability in Oracle's JD Edwards EnterpriseOne Tools product allows an unauthenticated attacker with network access to compromise JD Edwards EnterpriseOne Tools. Versions 9.2.0.0-9.2.26.2 are affected by this easily exploitable vulnerability.

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle allows an unauthenticated attacker with network access to compromise JD Edwards EnterpriseOne Tools. Affected versions are 9.2.0.0-9.2.26.2.

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle allows an unauthenticated attacker with network access to compromise JD Edwards EnterpriseOne Tools. Affected versions are 9.2.0.0-9.2.26.2.

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle allows an unauthenticated attacker with network access to compromise JD Edwards EnterpriseOne Tools. Versions 9.2.0.0-9.2.26.2 are affected by this easily exploitable flaw.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component E1 Dev Platform Tech - UNIX) versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with network access via HTTP can, with user interaction, perform unauthorized updates, inserts, or deletes and gain unauthorized read access to a subset of data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security). Affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to cause a partial denial of service.

Vulnerability in the Installation Security component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with local logon, requiring user interaction, can modify critical data, gain unauthorized read access, and cause a hang or repeatable crash.

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC) versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes can take over the product, but human interaction is required.

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security) versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with access to the physical communication segment attached to the hardware where JD Edwards EnterpriseOne Tools executes can take over the product. The vulnerability is difficult to exploit.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affecting versions 9.2.0.0-9.2.26.4. An unauthenticated attacker with access to the physical communication segment can exploit it, requiring user interaction; attacks may impact additional products (scope change) and lead to takeover of JD Edwards EnterpriseOne Tools.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized access to critical data or complete access to all data accessible in JD Edwards EnterpriseOne Tools.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes can easily exploit it, requiring user interaction, leading to takeover of the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes can easily exploit it, requiring user interaction, leading to takeover of the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.4. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.

Vulnerability in the Installation Security component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with local logon can gain access to critical data, and attacks may impact additional products.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to compromise the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to compromise the system.

Vulnerability in the Interoperability SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with network access via HTTPS can gain access to critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with network access via Oracle Net to gain unauthorized access to critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with network access via Oracle Net to gain unauthorized access to critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to compromise the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to compromise the system, requiring human interaction.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, requiring human interaction.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC). Affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to cause a partial denial of service, requiring user interaction.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Monitoring and Diagnostics SEC). Affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a low-privileged attacker with logon to the infrastructure to modify some data and cause a partial denial of service.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Web Runtime SEC). Affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to modify some data, requiring user interaction.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized update, insert or delete of some data and read a subset of data. CVSS 3.1 Base Score 5.4.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with HTTP network access can, with user interaction, perform unauthorized update, insert or delete of some data and read a subset of data. CVSS 3.1 Base Score 6.1.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, requiring human interaction.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Business Logic Infra SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with JDENET network access can cause a partial denial of service. CVSS 3.1 Base Score 4.3.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Business Logic Infra SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with JDENET network access can gain unauthorized read access to a subset of data and cause a partial denial of service. CVSS 3.1 Base Score 5.4.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Business Logic Infra SEC). Affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a low-privileged attacker with logon to the infrastructure to modify and read some data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes can gain unauthorized access to critical data or all accessible data. CVSS 3.1 Base Score 5.5.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with access to the physical communication segment attached to the hardware where JD Edwards EnterpriseOne Tools executes can gain unauthorized access to critical data or all accessible data. CVSS 3.1 Base Score 5.3.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Interoperability SEC component) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit network attack via JDENET by an unauthenticated attacker can lead to unauthorized access and modification, creation, or deletion of critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable adjacent-network attack by an unauthenticated attacker can lead to unauthorized access and modification, creation, or deletion of critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable adjacent-network attack by an unauthenticated attacker can lead to unauthorized access to and modification of critical data, and may impact additional products (scope change).