CVE-2006-5378

3 documents3 sources
Severity
9.0CRITICAL
EPSS
1.9%
top 16.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Enterpriseone
Timeline
PublishedOct 18
Latest updateMay 1

Description

Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln# JDE01.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 8.0 | Impact: 10.0

Affected Packages1 packages

▶NVDoracle/enterpriseone8.95.p1, 8.96.d1, sp23_o2+2

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fxxw-hwrg-h772: Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8↗2022-05-01
▶
CVEList
CVE-2006-5378: Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8↗2006-10-18
▶
CVE-2006-5378 (CRITICAL CVSS 9) | Unspecified vulnerability in JD Edw | cvebase.io