Vulnerability in JD Edwards EnterpriseOne Tools by Oracle

CVE-2025-30760

What is CVE-2025-30760?

A vulnerability has been identified in the JD Edwards EnterpriseOne Tools product from Oracle, specifically within the Web Runtime SEC component. This issue allows low-privileged attackers with network access via HTTP to exploit the system, potentially leading to unauthorized updates, inserts, or deletions of accessible data. Additionally, attackers could gain unauthorized read access to a subset of the system's data, compromising both confidentiality and integrity. Versions affected range from 9.2.0.0 to 9.2.9.3, presenting a significant risk for organizations utilizing this software.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References