Oracle JD Edwards EnterpriseOne Tools vulnerabilities

Vulnerability in the Web Runtime SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with JDENET network access can gain unauthorized access to critical data or all data accessible in the product.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX component) affecting versions 9.2.0.0-9.2.26.5. A high-privileged attacker with logon can perform unauthorized modification, read data, and cause partial denial of service.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon can create, delete, or modify critical data, read a subset, and cause hang or repeatable crashes (complete DoS).

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with JDENET network access can gain unauthorized access to critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with access to the physical communication segment can access and modify critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with HTTP network access can gain unauthorized access to critical data.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with JDENET network access can cause hang or repeatable crashes (complete DoS), modify data, and read a subset.