CVSS: 3.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-20957
https://notcve.org/view.php?id=CVE-2024-20957
16 Jan 2024 — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are Prior to 9.2.8.1. Easily exploitable vulnerability allows high privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 2.7 (Availabilit... • https://www.oracle.com/security-alerts/cpujan2024.html •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-22055
https://notcve.org/view.php?id=CVE-2023-22055
18 Jul 2023 — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.7.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products ... • https://www.oracle.com/security-alerts/cpujul2023.html •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-21936
https://notcve.org/view.php?id=CVE-2023-21936
18 Apr 2023 — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (... • https://www.oracle.com/security-alerts/cpuapr2023.html •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-21927
https://notcve.org/view.php?id=CVE-2023-21927
18 Apr 2023 — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are Prior to 9.2.7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). • https://www.oracle.com/security-alerts/cpuapr2023.html •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-21629
https://notcve.org/view.php?id=CVE-2022-21629
18 Oct 2022 — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products ... • https://www.oracle.com/security-alerts/cpuoct2022.html •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2022-21630
https://notcve.org/view.php?id=CVE-2022-21630
18 Oct 2022 — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products... • https://www.oracle.com/security-alerts/cpuoct2022.html •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2022-21631
https://notcve.org/view.php?id=CVE-2022-21631
18 Oct 2022 — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC). Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional product... • https://www.oracle.com/security-alerts/cpuoct2022.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-21561
https://notcve.org/view.php?id=CVE-2022-21561
19 Jul 2022 — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality... • https://www.oracle.com/security-alerts/cpujul2022.html •
CVSS: 7.4EPSS: 0%CPEs: 1EXPL: 0CVE-2022-21542
https://notcve.org/view.php?id=CVE-2022-21542
19 Jul 2022 — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. While the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update,... • https://www.oracle.com/security-alerts/cpujul2022.html •
CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 0CVE-2022-21464
https://notcve.org/view.php?id=CVE-2022-21464
19 Apr 2022 — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). The supported version that is affected is Prior to 9.2.6.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of JD Edwards EnterpriseOne Tools and unauthorized rea... • https://www.oracle.com/security-alerts/cpuapr2022.html •