Vulnerabilities

TI-2025-15498 CVE-2025-21538 · GHSA-gmx3-jm7j-288w

Cross-site request forgery in Oracle JD Edwards EnterpriseOne Tools

LOW 27

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00194 Published 2025-01-21 Fixed in 9.2.9.2 CWE-352

TI-2025-15487 CVE-2025-21527 · GHSA-cwjp-xwrc-rmgf

Missing authorization in Oracle JD Edwards EnterpriseOne Tools

LOW 27

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00393 Published 2025-01-21 Fixed in 9.2.9.0 CWE-862

TI-2025-15484 CVE-2025-21524 · GHSA-28rx-w98g-gmx7

Missing authentication in Oracle JD Edwards EnterpriseOne Tools

MEDIUM 50

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00787 Published 2025-01-21 Fixed in 9.2.9.0 CWE-306

TI-2025-15477 CVE-2025-21517 · GHSA-329p-rhmw-5hxx

Incorrect authorization in Oracle JD Edwards EnterpriseOne Tools

LOW 20

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00416 Published 2025-01-21 Fixed in 9.2.9.0 CWE-863

TI-2025-15475 CVE-2025-21515 · GHSA-c35g-4p36-qchm

Missing authentication in Oracle JD Edwards EnterpriseOne Tools

MEDIUM 41

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00685 Published 2025-01-21 Fixed in 9.2.9.0 CWE-306

TI-2025-15474 CVE-2025-21514 · GHSA-xgh9-482q-m2w6

Missing authorization in Oracle JD Edwards EnterpriseOne Tools

LOW 31

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00508 Published 2025-01-21 Fixed in 9.2.9.0 CWE-862

TI-2025-15473 CVE-2025-21513 · GHSA-rm9r-5rv8-5jw4

Cross-site request forgery in Oracle JD Edwards EnterpriseOne Tools

LOW 27

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00206 Published 2025-01-21 Fixed in 9.2.9.0 CWE-352

TI-2025-15472 CVE-2025-21512 · GHSA-xfx9-q5gv-952r

Open redirect in Oracle JD Edwards EnterpriseOne Tools

LOW 27

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00393 Published 2025-01-21 Fixed in 9.2.9.0 CWE-601

TI-2025-15471 CVE-2025-21511 · GHSA-rqjw-2j4m-q7vm

Origin validation error in Oracle JD Edwards EnterpriseOne Tools

LOW 39

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00321 Published 2025-01-21 Fixed in 9.2.9.0 CWE-346

TI-2025-15470 CVE-2025-21510 · GHSA-mvxf-h63w-mqr2

Observable discrepancy in Oracle JD Edwards EnterpriseOne Tools

MEDIUM 40

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00686 Published 2025-01-21 Fixed in 9.2.9.0 CWE-203

TI-2025-15469 CVE-2025-21509 · GHSA-9gqm-5hjx-3fmj

Resource allocation without limits in Oracle JD Edwards EnterpriseOne Tools

LOW 30

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00715 Published 2025-01-21 Fixed in 9.2.9.0 CWE-770

TI-2025-15468 CVE-2025-21508 · GHSA-7j86-mfh6-h4g2

Resource allocation without limits in Oracle JD Edwards EnterpriseOne Tools

LOW 30

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00715 Published 2025-01-21 Fixed in 9.2.9.0 CWE-770

TI-2025-15467 CVE-2025-21507 · GHSA-465r-x6x2-phxx

Cross-site request forgery in Oracle JD Edwards EnterpriseOne Tools

LOW 24

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00199 Published 2025-01-21 Fixed in 9.2.9.0 CWE-352

TI-2024-14021 CVE-2024-21245 · GHSA-fr48-xrq7-qc9m

Origin validation error in Oracle JD Edwards EnterpriseOne Tools

LOW 24

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00199 Published 2025-01-21 Fixed in 9.2.9.0 CWE-346

Vulnerabilities

Filters