Vulnerability in JD Edwards EnterpriseOne Tools by Oracle

CVE-2025-30760

What is CVE-2025-30760?

A vulnerability has been identified in the JD Edwards EnterpriseOne Tools product from Oracle, specifically within the Web Runtime SEC component. This issue allows low-privileged attackers with network access via HTTP to exploit the system, potentially leading to unauthorized updates, inserts, or deletions of accessible data. Additionally, attackers could gain unauthorized read access to a subset of the system's data, compromising both confidentiality and integrity. Versions affected range from 9.2.0.0 to 9.2.9.3, presenting a significant risk for organizations utilizing this software.

References