Unauthenticated Network Access Vulnerability in JD Edwards EnterpriseOne Tools by Oracle

CVE-2025-21527

What is CVE-2025-21527?

A vulnerability exists in JD Edwards EnterpriseOne Tools from Oracle, specifically in the Design Tools SEC component, which affects versions prior to 9.2.9.0. This flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. While the attack requires human interaction, successful exploitation can lead to unauthorized modifications, including insertions and deletions of data, and unauthorized reading of some accessible data. The impact of this vulnerability is significant, potentially affecting additional products associated with JD Edwards EnterpriseOne Tools.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References