Vulnerability in JD Edwards EnterpriseOne Tools by Oracle

CVE-2025-21507

Summary

A vulnerability exists in the JD Edwards EnterpriseOne Tools product from Oracle, specifically in the Web Runtime component. This security flaw allows low-privileged attackers with network access to compromise the application via HTTP. Exploitation requires human interaction from a user other than the attacker, revealing a nuanced attack vector. Although primarily impacting JD Edwards EnterpriseOne Tools, successful attacks can have broader implications on associated products. The vulnerability can lead to unauthorized data manipulation, including update, insert, or delete operations, as well as unauthorized access to certain data within the system.

References