JD Edwards EnterpriseOne Tools vulnerabilities

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with JDENET network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with HTTP network access can, with user interaction, gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 4.3.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Portal SEC component) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit HTTP attack allows an unauthenticated network attacker to gain unauthorized access to critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable HTTP attack requiring user interaction may impact additional products, enabling unauthorized modification and read of some data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable HTTP attack requiring user interaction may impact additional products, enabling unauthorized modification and read of some data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable HTTP attack requiring user interaction may impact additional products, enabling unauthorized modification and read of some data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable attack by a low-privileged user logged into the infrastructure allows access to critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit SQL attack by a high-privileged attacker may impact additional products and allows access to and modification of critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit HTTP attack allows an unauthenticated attacker to access critical data and modify it without authorization.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Object and Env Tech SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable network attack via HTTP by an unauthenticated attacker can lead to unauthorized access to critical data and may impact additional products (scope change).

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Interoperability SEC component) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit network attack via HTTPS by an unauthenticated attacker can lead to unauthorized access and modification, creation, or deletion of critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable network attack via HTTP by a low-privileged attacker can lead to unauthorized access and modification, creation, or deletion of critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable network attack via HTTP by a low-privileged attacker can lead to takeover of JD Edwards EnterpriseOne Tools.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable network attack via HTTP by a low-privileged attacker can lead to unauthorized access and modification, creation, or deletion of critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable network attack via HTTP by a low-privileged attacker can lead to takeover of JD Edwards EnterpriseOne Tools.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Interoperability SEC component) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable network attack via SOAP by an unauthenticated attacker can lead to unauthorized access to critical data and may impact additional products (scope change).

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC) affecting versions 9.2.0.0-9.2.26.5. A low privileged attacker with local logon can exploit it to gain unauthorized creation, deletion or modification access to critical data and complete access to all JD Edwards EnterpriseOne Tools accessible data.

Vulnerability in the Package Build SEC component of Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0-9.2.26.5. A high-privileged attacker with local logon to the infrastructure can take over JD Edwards EnterpriseOne Tools.

Vulnerability in the Business Logic Infra SEC component of Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0-9.2.26.5. A low-privileged attacker with network access via JDENET can update, insert or delete data and gain unauthorized read access to a subset of data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized update, insert, or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.6.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component E1 Dev Platform Tech - Cloud). Affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a high-privileged attacker with local logon to cause unauthorized data modification and partial denial of service.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component E1 Dev Platform Tech - UNIX). Affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a high-privileged attacker with local logon to cause unauthorized data modification and partial denial of service.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with network access via JDENET can cause a hang or repeatable crash (complete DoS) and gain unauthorized read and update access to some data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access to the infrastructure can gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Package Build SEC component) affecting versions 9.2.0.0-9.2.26.5. A high-privileged attacker with logon access to the infrastructure can take over the application.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access, requiring user interaction, can take over the application.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access can create, delete or modify critical data and gain unauthorized access to it.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access can create, delete or modify critical data and gain unauthorized access to it.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with network access via SMTP can modify some data and cause a partial denial of service.

Vulnerability in JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise JD Edwards EnterpriseOne Tools.

Vulnerability in JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data.

Vulnerability in JD Edwards EnterpriseOne Tools (component: Interoperability SEC) affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via TLS to gain unauthorized creation, deletion, or modification access to critical data and access to it.

Vulnerability in JD Edwards EnterpriseOne Tools (component: Interoperability SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools.

Vulnerability in JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a low-privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Database and Comm SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to take over the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Package Build SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to create, delete or modify data and to cause a hang or repeatable crash of the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Enterprise Infrastructure SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with local logon to the infrastructure to create, delete or modify data and gain full access to system data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Interoperability SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical data and cause a partial denial of service.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Interoperability SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to create, delete or modify data and gain full access to system data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Enterprise Infrastructure SEC) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SMTP to take over the system.

Vulnerability in JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.4. A low-privileged attacker with network access via HTTP can fully compromise the system. CVSS score is 8.8.

Vulnerability in JD Edwards EnterpriseOne Tools (component: Business Logic Infra SEC) affects versions 9.2.0.0-9.2.26.4. A low-privileged attacker with network access via HTTP can perform unauthorized modifications to critical data and gain full access to data. CVSS score is 8.1.

In JD Edwards EnterpriseOne Tools version 9.2.26.3, a difficult-to-exploit vulnerability in the Installation Security component allows an unauthenticated attacker with access to the communication segment, with user interaction, to gain unauthorized read and write access to some data.

JD Edwards EnterpriseOne Tools version 9.2.26.3 has a vulnerability in the Installation Security component. A privileged attacker with local access can unauthorizedly create, delete, or modify critical data, also affecting other products (scope change).

Vulnerability in JD Edwards EnterpriseOne Tools (component: Web Runtime Security) version 9.2.26.3. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.

A vulnerability in JD Edwards EnterpriseOne Tools version 9.2.26.3. Difficult to exploit, requires local access and low privileges. May lead to unauthorized data modification and partial denial of service.

Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3 (component: Interoperability Security) has a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via JDENET to cause a partial denial of service (partial DOS).

Vulnerability in JD Edwards EnterpriseOne Tools (Web Runtime SEC component) versions 9.2.0.0-9.2.9.4. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).

Vulnerability in JD Edwards EnterpriseOne Tools (Object and Environment Tech component) versions 9.2.0.0-9.2.9.4. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).