Known vulnerabilities in JD Edwards EnterpriseOne Orchestrator

Vendor: Oracle
Software: JD Edwards EnterpriseOne Orchestrator
Software CPE: cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 24
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JD Edwards EnterpriseOne Orchestrator JD Edwards EnterpriseOne Orchestrator is affected by 24 known vulnerabilities: 4 high, 16 medium, 4 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009		 CWE-404 Medium
No
No
 - 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU103164 - Improper input validation
CVE-2025-21552		 CWE-20 Medium
No
No
 9.2.9.2 21.01.2025 SB2025012220
#VU94561 - Improper input validation
CVE-2024-21168		 CWE-20 Medium
No
No
 9.2.8.3 18.07.2024 SB20240718152
#VU78418 - Improper input validation
CVE-2023-22050		 CWE-20 Medium
No
No
 9.2.7.4 19.07.2023 SB20230719102
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 9.2.8.2 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 9.2.8.0 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 9.2.7.4 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Available
Exploited
 9.2.7.2 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 9.2.7.3 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU65499 - Improper input validation
CVE-2021-31684		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU65502 - Improper input validation
CVE-2022-21532		 CWE-20 Low
No
No
 - 20.07.2022 SB2022072048
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 9.2.6.3 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU49929 - Improper input validation
CVE-2021-2052		 CWE-20 Medium
No
No
 9.2.5.1 22.01.2021 SB2021012223
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 9.2.7.3 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 9.2.5.0 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU24168 - Improper input validation
CVE-2019-17195		 CWE-20 Medium
No
No
 - 09.01.2020 SB2019101519
SB2020010921
SB2020040218
and 20 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 9.2.5.3 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more


Showing elements 1 - 20 out of 24