Known vulnerabilities in JD Edwards EnterpriseOne Tools - page 4

Vendor: Oracle
Software: JD Edwards EnterpriseOne Tools
Software CPE: cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 133
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JD Edwards EnterpriseOne Tools JD Edwards EnterpriseOne Tools is affected by 133 known vulnerabilities: 2 critical, 20 high, 85 medium, 26 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 9.2.8.1 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU78417 - Improper input validation
CVE-2023-22055		 CWE-20 Medium
No
No
 9.2.7.4 19.07.2023 SB20230719101
#VU75268 - Improper input validation
CVE-2023-21936		 CWE-20 Medium
No
No
 9.2.7.3 18.04.2023 SB20230418165
#VU75269 - Improper input validation
CVE-2023-21927		 CWE-20 Low
No
No
 9.2.7.3 18.04.2023 SB20230418165
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548		 CWE-350 Medium
No
No
 9.2.7.3 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 9.2.7.3 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68511 - Improper input validation
CVE-2022-21631		 CWE-20 Medium
No
No
 - 19.10.2022 SB2022101979
#VU68512 - Improper input validation
CVE-2022-21630		 CWE-20 Medium
No
No
 - 19.10.2022 SB2022101979
#VU68513 - Improper input validation
CVE-2022-21629		 CWE-20 Medium
No
No
 - 19.10.2022 SB2022101979
#VU64921 - Heap-based Buffer Overflow
CVE-2022-2274		 CWE-122 High
Available
No
 9.2.7.3 05.07.2022 SB2022070509
SB2022070531
SB2022102078
and 7 more
#VU62080 - Double Free
CVE-2022-28738		 CWE-415 High
No
No
 9.2.7.2 12.04.2022 SB2022041215
SB2022041404
SB2022060704
and 13 more
#VU61043 - Resource Management Errors
CVE-2022-26336		 CWE-399 Medium
No
No
 9.2.7.2 07.03.2022 SB2022030703
SB2023012211
SB2023020762
and 6 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 9.2.6.4 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59551 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21824		 CWE-94 Medium
No
No
 9.2.7.2 12.01.2022 SB2022011216
SB2022041205
SB2022060315
and 39 more
#VU57846 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-41973		 CWE-835 Medium
No
No
 9.2.7.3 01.11.2021 SB2021110114
SB2022042540
SB20230418165
and 4 more
#VU56931 - Memory corruption
CVE-2021-30129		 CWE-119 Medium
No
No
 9.2.7.3 29.09.2021 SB2021092916
SB2021092917
SB2021111715
and 15 more
#VU54855 - Resource exhaustion
CVE-2021-36373		 CWE-400 Medium
No
No
 9.2.7.3 14.07.2021 SB2021071409
SB2021072011
SB2022080830
and 16 more
#VU49330 - Insecure Temporary File
CVE-2020-15250		 CWE-377 Low
No
No
 9.2.7.3 12.10.2020 SB2020101219
SB2021010712
SB2020110317
and 25 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 - 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU24140 - Use After Free
CVE-2018-1311		 CWE-416 High
No
No
 9.2.7.3 08.01.2020 SB2019121828
SB2020030618
SB2020030619
and 31 more


Showing elements 61 - 80 out of 133