Vulnerability in JD Edwards EnterpriseOne Tools by Oracle
CVE-2025-53060
6.1MEDIUM
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 21 October 2025
What is CVE-2025-53060?
A vulnerability in Oracle's JD Edwards EnterpriseOne Tools allows unauthenticated attackers to exploit network access via HTTP. This easily exploitable vulnerability requires human interaction from someone other than the attacker and can affect additional products beyond JD Edwards EnterpriseOne Tools. Successful exploitations can lead to unauthorized update, insert, or delete access to accessible data within the tools, as well as unauthorized read access to sensitive information. Organizations utilizing affected versions should prioritize remediation to mitigate potential security risks.
Affected Version(s)
JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.9.4