Known vulnerabilities in JD Edwards EnterpriseOne Tools - page 3

Vendor: Oracle
Software: JD Edwards EnterpriseOne Tools
Software CPE: cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 133
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JD Edwards EnterpriseOne Tools JD Edwards EnterpriseOne Tools is affected by 133 known vulnerabilities: 2 critical, 20 high, 85 medium, 26 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103160 - Improper input validation
CVE-2025-21524		 CWE-20 High
No
No
 9.2.9.0 21.01.2025 SB2025012219
#VU103161 - Improper input validation
CVE-2025-21515		 CWE-20 High
No
No
 9.2.9.0 21.01.2025 SB2025012219
#VU103162 - Improper input validation
CVE-2025-21510		 CWE-20 Medium
No
No
 9.2.9.0 21.01.2025 SB2025012219
#VU103163 - Improper input validation
CVE-2025-21511		 CWE-20 Medium
No
No
 9.2.9.0 21.01.2025 SB2025012219
#VU98805 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-4782		 CWE-22 Low
No
No
 9.2.9.2 18.10.2024 SB2024101801
SB2025012219
#VU94562 - Improper input validation
CVE-2024-21150		 CWE-20 Medium
No
No
 9.2.8.2 18.07.2024 SB20240718153
#VU88175 - Reachable Assertion
CVE-2024-27983		 CWE-617 Medium
Available
No
 9.2.9.2 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU85569 - Improper input validation
CVE-2024-20937		 CWE-20 Low
No
No
 9.2.8.1 18.01.2024 SB2024011822
#VU85570 - Improper input validation
CVE-2024-20905		 CWE-20 Low
No
No
 9.2.8.0 18.01.2024 SB2024011822
#VU85571 - Improper input validation
CVE-2024-20957		 CWE-20 Low
No
No
 9.2.8.1 18.01.2024 SB2024011822
#VU82069 - Improper Validation of Integrity Check Value
CVE-2023-38552		 CWE-354 Medium
No
No
 9.2.8.2 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 34 more
#VU81875 - Improper Authorization
CVE-2023-3961		 CWE-285 High
No
No
 9.2.9.2 11.10.2023 SB2023101133
SB2023101137
SB2023101155
and 28 more
#VU81427 - UNIX Symbolic Link (Symlink) Following
CVE-2023-35887		 CWE-61 Low
No
No
 9.2.8.2 03.10.2023 SB2023100336
SB2023100337
SB2023100453
and 21 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 9.2.8.2 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 9.2.9.0 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 9.2.8.0 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU74007 - Incorrect Regular Expression
CVE-2023-28756		 CWE-185 Medium
No
No
 9.2.8.1 24.03.2023 SB2023033146
SB2023050430
SB2023051746
and 33 more
#VU68967 - Stack-based buffer overflow
CVE-2022-3479		 CWE-121 Medium
No
No
 9.2.8.0 04.11.2022 SB2022110401
SB2022110406
SB2022121901
and 18 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 9.2.8.0 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 9.2.8.2 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more


Showing elements 41 - 60 out of 133