Known vulnerabilities in JD Edwards EnterpriseOne Tools - page 6

Vendor: Oracle
Software: JD Edwards EnterpriseOne Tools
Software CPE: cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 133
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JD Edwards EnterpriseOne Tools JD Edwards EnterpriseOne Tools is affected by 133 known vulnerabilities: 2 critical, 20 high, 85 medium, 26 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49086 - Comparison using wrong factors
CVE-2020-28052		 CWE-1025 High
Available
No
 9.2.5.3 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 9.2.5.3 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU47770 - Improper input validation
CVE-2020-9281		 CWE-20 Medium
No
No
 9.2.5.2 21.10.2020 SB2020102103
SB2020102951
SB2021012078
and 8 more
#VU29068 - Server-Side Request Forgery (SSRF)
CVE-2019-17566		 CWE-918 Medium
No
No
 9.2.4.0 16.06.2020 SB2020061613
SB2020062304
SB2020072310
and 23 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 9.2.3.3 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU27232 - Improper input validation
CVE-2020-2733		 CWE-20 High
No
No
 - 23.04.2020 SB2020042335
#VU27061 - NULL Pointer Dereference
CVE-2020-1967		 CWE-476 Medium
Available
No
 9.2.5.0 21.04.2020 SB2020042130
SB2020042131
SB2020042326
and 19 more
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546		 CWE-502 High
No
No
 9.2.4.2 09.03.2020 SB2020030909
SB2020071523
SB2020071620
and 31 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 - 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU21465 - Out-of-bounds read
CVE-2018-11058		 CWE-125 Medium
No
No
 - 01.10.2019 SB2018091402
SB2020012202
SB2020011462
and 12 more
#VU21043 - Cryptographic Issues
CVE-2019-1547		 CWE-310 Low
No
No
 - 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 39 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 9.2.5.3 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU19941 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12086		 CWE-200 Medium
No
No
 - 06.08.2019 SB2019052407
SB2019092703
SB2019100116
and 30 more
#VU19933 - Permissions, Privileges, and Access Controls
CVE-2019-14379		 CWE-264 High
No
No
 - 05.08.2019 SB2019091307
SB2019092703
SB2019100116
and 33 more
#VU35956 - Improper Access Control
CVE-2019-2564		 CWE-284 Low
No
No
 - 23.04.2019 SB2018011820
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 - 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559		 CWE-327 Low
No
No
 - 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU17781 - Improper input validation
CVE-2018-19362		 CWE-20 High
No
No
 - 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 38 more
#VU13059 - Deserialization of Untrusted Data
CVE-2018-8013		 CWE-502 Low
No
No
 - 30.05.2018 SB2018053011
SB2018060503
SB2019011705
and 16 more
#VU12127 - Deserialization of Untrusted Data
CVE-2017-5645		 CWE-502 High
No
No
 - 24.04.2018 SB2017040201
SB2019011707
SB2017090512
and 40 more


Showing elements 101 - 120 out of 133