CVE-2011-0825

4 documents4 sources

Severity

6.8MEDIUM

EPSS

0.6%

top 29.44%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Oneworld Tools Oracle Enterpriseone Tools Oracle JD Edwards Enterpriseone +3 more

Timeline

PublishedApr 20

Latest updateMay 17

Description

Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect confidentiality, integrity, and availability, related to Enterprise Infrastructure SEC.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages6 packages

▶NVDoracle/enterpriseone_tools8.9

▶NVDoracle/oneworld_tools24.1.3

▶NVDoracle/jd_edwards_enterpriseone4 versions+3

▶NVDoracle/jd_edwards_enterpriseone_ep8.9

▶NVDoracle/peoplesoft_and_jdedwards_suite_scm8.9

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-hc9m-rqjf-gvrh: Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8↗2022-05-17

▶

CVEList

CVE-2011-0825: Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8↗2011-04-20

▶

📋Vendor Advisories

Red Hat

MySQL: mysqld DoS (assertion failure) by alternate reads from two indexes on a table using the HANDLER interface (MySQL bug #54007)↗2010-07-09

▶