Vulnerabilities

Filters

Reset all

2 selected

50 records

Sort

Vendor: Oracle Component: Jd Edwards Enterpriseone Orchestrator Clear all filters

TI-2026-77358 CVE-2026-91299 · GHSA-hffg-22c9-m9ch

Access control flaw in Oracle JD Edwards EnterpriseOne Orchestrator

MEDIUM 49

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00494 Published 2026-10-20 No fix listed CWE-284

TI-2026-77344 CVE-2026-91285 · GHSA-mjrj-q96q-xfm3

Improper access control in Oracle JD Edwards EnterpriseOne Orchestrator

LOW 29

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00337 Published 2026-10-20 No fix listed CWE-284

TI-2026-77336 CVE-2026-91277 · GHSA-rc46-f8x5-6p3x

Oracle JD Edwards EnterpriseOne Orchestrator Information Exposure

LOW 30

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00323 Published 2026-10-20 No fix listed CWE-200

TI-2026-77335 CVE-2026-91276 · GHSA-m3m9-qf77-pjqq

Access control flaw in Oracle JD Edwards EnterpriseOne Orchestrator

LOW 24

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00231 Published 2026-10-20 No fix listed CWE-284

TI-2026-43914 CVE-2026-61270 · GHSA-c3qm-rmp8-hpp2

Improper access control in Oracle JD Edwards EnterpriseOne Orchestrator

LOW 37

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00362 Published 2026-08-18 No fix listed CWE-284

TI-2026-43909 CVE-2026-61265 · GHSA-r59m-7x9c-gxf6

Improper access control in Oracle JD Edwards EnterpriseOne Orchestrator

LOW 37

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-08-18 No fix listed CWE-284

TI-2025-15512 CVE-2025-21552 · GHSA-432f-m59q-xvcj

Weak authentication in Oracle JD Edwards EnterpriseOne Orchestrator

LOW 29

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0042 Published 2025-01-21 Fixed in 9.2.9.2 CWE-1390

TI-2024-13958 CVE-2024-21168 · GHSA-747h-2wj2-cmvf

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…

LOW 29

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0048 Published 2024-07-16 Fixed in 9.2.8.3

TI-2023-08420 CVE-2023-22050 · GHSA-gj5c-qx92-2rhx

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…

LOW 25

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0038 Published 2023-07-18 Fixed in 9.2.7.4

TI-2022-05912 CVE-2022-21532 · GHSA-78ch-pwqc-4pp5

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…

LOW 21

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00638 Published 2022-07-19 No fix listed

TI-2021-01737 CVE-2021-2052 · GHSA-9v5h-24hm-5jw8

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…

LOW 35

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.01378 Published 2021-01-20 Fixed in 9.2.5.1

TI-2020-18499 CVE-2020-36179 · GHSA-9gph-22xh-8x98

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 57

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17065 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18500 CVE-2020-36180 · GHSA-8c4j-34r4-xr8g

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18502 CVE-2020-36182 · GHSA-89qr-369f-5m5x

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18503 CVE-2020-36183 · GHSA-9m6f-7xcq-8vf8

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04931 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18504 CVE-2020-36184 · GHSA-m6x4-97wx-4q27

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08356 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18505 CVE-2020-36185 · GHSA-8w26-6f25-cm9x

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18506 CVE-2020-36186 · GHSA-v585-23hc-c647

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18507 CVE-2020-36187 · GHSA-r695-7vr9-jgc2

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18508 CVE-2020-36188 · GHSA-f9xh-2qgp-cq57

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 55

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.08787 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18509 CVE-2020-36189 · GHSA-vfqx-33qm-g869

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03987 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18501 CVE-2020-36181 · GHSA-cvm9-fjm9-3572

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18187 CVE-2020-35728 · GHSA-5r5r-6hpj-8gg9

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.12405 Published 2020-12-27 Partial fix · 2.9.10.8 CWE-502

TI-2020-13270 CVE-2020-17521 · GHSA-rcjj-h6gh-jf3r

Apache Groovy provides extension methods to aid with creating temporary directories.

LOW 27

Apache Groovy provides extension methods to aid with creating temporary directories.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01027 Published 2020-12-07 Partial fix · 2.4.21, 2.5.14 +1 CWE-379

TI-2020-15666 CVE-2020-25649 · GHSA-288c-cq4h-88gq

XML external entity injection in jackson-databind

MEDIUM 56

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.17714 Published 2020-12-03 Partial fix · 2.6.7.4, 2.9.10.7 +1 CWE-611