Unauthenticated Network Access Vulnerability in JD Edwards EnterpriseOne Tools by Oracle

CVE-2025-21527

What is CVE-2025-21527?

A vulnerability exists in JD Edwards EnterpriseOne Tools from Oracle, specifically in the Design Tools SEC component, which affects versions prior to 9.2.9.0. This flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. While the attack requires human interaction, successful exploitation can lead to unauthorized modifications, including insertions and deletions of data, and unauthorized reading of some accessible data. The impact of this vulnerability is significant, potentially affecting additional products associated with JD Edwards EnterpriseOne Tools.

References