Medium WID-SEC-2026-1200 3 CVEs

Oracle JD Edwards: Mehrere Schwachstellen

Published Apr 21, 2026 · Updated Apr 21, 2026 · de-DE

Vendor: Oracle Product: JD Edwards Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle JD Edwards ausnutzen, um die Vertraulichkeit und Verfügbarkeit zu gefährden.

Product

Die Komponenten der Oracle JDEdwards sind vollständig integrierte und komplette Lösungen geschäftlicher Anwendungen (ERP) für Unternehmen.

Vulnerabilities 3

Critical 9.8

CVE-2025-9230

Out-of-bounds read & write in RFC 3211 KEK Unwrap

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application…

OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Sep 30, 2025
Medium 6.5

CVE-2023-5388

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Mar 19, 2024
Medium 5.3

CVE-2025-48924 Public exploit

Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs

Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(...) can thr…

Apache Software Foundation Apache Commons Lang druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven

Jul 11, 2025

Revision history

2026-04-21 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - April 2026 - Appendix Oracle JD Edwards vom 2026-04-21
https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixJDE