Vulnerability in JD Edwards EnterpriseOne Tools by Oracle
CVE-2024-21245
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 21 January 2025
What is CVE-2024-21245?
A vulnerability exists in Oracle's JD Edwards EnterpriseOne Tools affecting versions prior to 9.2.9.0. It allows low privilege attackers with HTTP network access to successfully exploit the system, provided human interaction occurs. While the vulnerability is specific to JD Edwards EnterpriseOne Tools, the implications of successful exploitation may extend to additional components. Attackers can achieve unauthorized updates, inserts, or deletions of data, as well as unauthorized read access to certain sensitive information within the JD Edwards ecosystem.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
JD Edwards EnterpriseOne Tools * < 9.2.9.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved