Known vulnerabilities in JD Edwards EnterpriseOne Tools - page 5

Vendor: Oracle
Software: JD Edwards EnterpriseOne Tools
Software CPE: cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 133
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JD Edwards EnterpriseOne Tools JD Edwards EnterpriseOne Tools is affected by 133 known vulnerabilities: 2 critical, 20 high, 85 medium, 26 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65500 - Improper input validation
CVE-2022-21542		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072049
#VU65501 - Improper input validation
CVE-2022-21561		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072049
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Available
No
 9.2.6.4 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU62556 - Improper input validation
CVE-2022-21464		 CWE-20 High
No
No
 9.2.6.3 25.04.2022 SB2022042513
#VU62557 - Improper input validation
CVE-2022-21409		 CWE-20 Medium
No
No
 9.2.6.3 25.04.2022 SB2022042513
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU58477 - Heap-based Buffer Overflow
CVE-2021-43527		 CWE-122 High
No
No
 9.2.6.4 01.12.2021 SB2021120123
SB2021120124
SB2021120201
and 66 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU57498 - Improper input validation
CVE-2021-22931		 CWE-20 High
No
No
 9.2.6.2 19.10.2021 SB2021101945
SB2022020113
SB2022031104
and 28 more
#VU57127 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-42013		 CWE-78 Critical
Available
Exploited
 9.2.6.0 07.10.2021 SB2021100718
SB2021100802
SB2021101513
and 8 more
#VU56063 - Memory corruption
CVE-2021-3711		 CWE-119 High
No
No
 9.2.6.3 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 53 more
#VU55489 - Improper Certificate Validation
CVE-2021-32066		 CWE-295 Medium
No
No
 9.2.6.1 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 28 more
#VU55370 - Improper input validation
CVE-2021-2375		 CWE-20 Medium
No
No
 - 27.07.2021 SB2021072759
#VU55371 - Improper input validation
CVE-2021-2373		 CWE-20 Medium
No
No
 - 27.07.2021 SB2021072759
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 9.2.6.3 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 9.2.6.1 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 59 more
#VU49795 - Improper input validation
CVE-2016-5725		 CWE-20 Medium
Available
No
 9.2.5.0 20.01.2021 SB2021012052
SB2021042512
SB2021042618
and 5 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 9.2.5.0 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU24168 - Improper input validation
CVE-2019-17195		 CWE-20 Medium
No
No
 - 09.01.2020 SB2019101519
SB2020010921
SB2020040218
and 20 more


Showing elements 81 - 100 out of 133