Unauthenticated Network Vulnerability in JD Edwards EnterpriseOne Tools by Oracle

CVE-2023-22055

Summary

JD Edwards EnterpriseOne Tools by Oracle is susceptible to an unauthenticated access vulnerability. This flaw allows attackers with network access via HTTP to compromise the system without requiring any prior authentication. While the direct impact is on JD Edwards EnterpriseOne Tools, successful exploitation can lead to unauthorized access, resulting in the ability to update, insert, or delete valuable data. Furthermore, it offers the potential for unauthorized reading of confidential information. A human's interaction is necessary for successful exploitation, making it crucial for users of affected versions prior to 9.2.7.4 to apply available patches to mitigate risks.

References