Vulnerability in JD Edwards EnterpriseOne Tools by Oracle
CVE-2025-53060

6.1MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
21 October 2025

What is CVE-2025-53060?

A vulnerability in Oracle's JD Edwards EnterpriseOne Tools allows unauthenticated attackers to exploit network access via HTTP. This easily exploitable vulnerability requires human interaction from someone other than the attacker and can affect additional products beyond JD Edwards EnterpriseOne Tools. Successful exploitations can lead to unauthorized update, insert, or delete access to accessible data within the tools, as well as unauthorized read access to sensitive information. Organizations utilizing affected versions should prioritize remediation to mitigate potential security risks.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.9.4

References

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.