JD Edwards EnterpriseOne Tools vulnerabilities

An unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability.

An unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Web Runtime SEC). Affected versions are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.8.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security). Affected version is 9.2.26.3. A low-privileged attacker with network access via HTTP can compromise the tools, potentially impacting other products.

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle, concerning the installation security component. It allows an unauthenticated attacker with access to the infrastructure where JD Edwards EnterpriseOne Tools runs to compromise the tool.

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle allows a low privileged attacker with network access via HTTP to compromise JD Edwards Tools. Attacks may significantly impact additional products, changing the scope of the threat.

A vulnerability in Oracle's JD Edwards EnterpriseOne Tools product allows an unauthenticated attacker with network access to compromise JD Edwards EnterpriseOne Tools. Versions 9.2.0.0-9.2.26.2 are affected by this easily exploitable vulnerability.

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle allows an unauthenticated attacker with network access to compromise JD Edwards EnterpriseOne Tools. Affected versions are 9.2.0.0-9.2.26.2.

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle allows an unauthenticated attacker with network access to compromise JD Edwards EnterpriseOne Tools. Affected versions are 9.2.0.0-9.2.26.2.

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle allows an unauthenticated attacker with network access to compromise JD Edwards EnterpriseOne Tools. Versions 9.2.0.0-9.2.26.2 are affected by this easily exploitable flaw.

Vulnerability in JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.4. A low-privileged attacker with network access via HTTP can fully compromise the system. CVSS score is 8.8.

Vulnerability in JD Edwards EnterpriseOne Tools (component: Business Logic Infra SEC) affects versions 9.2.0.0-9.2.26.4. A low-privileged attacker with network access via HTTP can perform unauthorized modifications to critical data and gain full access to data. CVSS score is 8.1.

In JD Edwards EnterpriseOne Tools version 9.2.26.3, a difficult-to-exploit vulnerability in the Installation Security component allows an unauthenticated attacker with access to the communication segment, with user interaction, to gain unauthorized read and write access to some data.

JD Edwards EnterpriseOne Tools version 9.2.26.3 has a vulnerability in the Installation Security component. A privileged attacker with local access can unauthorizedly create, delete, or modify critical data, also affecting other products (scope change).

Vulnerability in JD Edwards EnterpriseOne Tools (component: Web Runtime Security) version 9.2.26.3. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.

A vulnerability in JD Edwards EnterpriseOne Tools version 9.2.26.3. Difficult to exploit, requires local access and low privileges. May lead to unauthorized data modification and partial denial of service.

Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3 (component: Interoperability Security) has a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via JDENET to cause a partial denial of service (partial DOS).