Web Runtime Security Flaw in Oracle JD Edwards EnterpriseOne Tools

CVE-2025-21586

What is CVE-2025-21586?

A security vulnerability has been identified in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools that allows a low-privileged attacker with network access via HTTP to compromise the system. This issue affects multiple supported versions, specifically from 9.2.0.0 to 9.2.9.2. Exploitation of the vulnerability necessitates user interaction from a third party, and although it primarily resides within JD Edwards EnterpriseOne Tools, successful attacks could potentially impact connected products. Attackers may gain unauthorized update, insert, or delete capabilities, as well as unauthorized reading access to sensitive data within JD Edwards EnterpriseOne Tools.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References