CVE-2011-3509

3 documents3 sources

Severity

4.0MEDIUM

EPSS

0.2%

top 61.89%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle JD Edwards Enterpriseone Tools Oracle JD Edwards Products

Timeline

PublishedJan 18

Latest updateMay 17

Description

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3524.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages2 packages

▶NVDoracle/jd_edwards_enterpriseone_tools8.98

▶NVDoracle/jd_edwards_products8.98

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-pgqq-2vx2-gw88: Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8↗2022-05-17

▶

CVEList

CVE-2011-3509: Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8↗2012-01-18

▶