Vulnerability in JD Edwards EnterpriseOne Tools by Oracle

CVE-2024-21245

Summary

A vulnerability exists in Oracle's JD Edwards EnterpriseOne Tools affecting versions prior to 9.2.9.0. It allows low privilege attackers with HTTP network access to successfully exploit the system, provided human interaction occurs. While the vulnerability is specific to JD Edwards EnterpriseOne Tools, the implications of successful exploitation may extend to additional components. Attackers can achieve unauthorized updates, inserts, or deletions of data, as well as unauthorized read access to certain sensitive information within the JD Edwards ecosystem.

References