CVE-2022-21464 — Corporation JD Edwards Enterpriseone Tools vulnerability

4 documents4 sources

Severity

8.2HIGHNVD

EPSS

2.3%

top 15.35%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Corporation JD Edwards Enterpriseone Tools Oracle JD Edwards Enterpriseone Tools

Timeline

PublishedApr 19

Latest updateApr 20

Description

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). The supported version that is affected is Prior to 9.2.6.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of JD Edwards EnterpriseOne Tools and unau…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:HExploitability: 3.9 | Impact: 4.2

Affected Packages2 packages

▶CVEListV5oracle_corporation/jd_edwards_enterpriseone_toolsunspecified — 9.2.6.3

▶NVDoracle/jd_edwards_enterpriseone_tools9.2.0.0 — 9.2.6.3

🔴Vulnerability Details

GHSA

GHSA-6xhg-g6gg-5hvp: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC)↗2022-04-20

▶

CVEList

CVE-2022-21464: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC)↗2022-04-19

▶

📋Vendor Advisories

Oracle

Oracle Oracle JD Edwards Risk Matrix: Business Logic Infra SEC — CVE-2022-21464↗2022-04-15

▶