Skip to content
OpenAdvisories
Low · 2.7 CVE-2024-20905 EUVD-2024-18620GHSA-57p5-7r24-7vg9

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported vers…

Published Feb 17, 2024 · Updated Nov 13, 2024 · Assigned by oracle

Description

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are Prior to 9.2.8.0. Easily exploitable vulnerability allows high privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

Affected products

VendorProductAffectedFixed
Oracle JD Edwards EnterpriseOne Tools < 9.2.8.0 9.2.8.0

Advisories 1

References