Oracle Jd Edwards Enterpriseone Tools vulnerabilities
173 known vulnerabilities affecting oracle/jd_edwards_enterpriseone_tools.
Total CVEs
173
CISA KEV
2
actively exploited
Public exploits
11
Exploited in wild
7
Severity breakdown
CRITICAL33HIGH57MEDIUM78LOW5
Vulnerabilities
Page 7 of 9
CVE-2018-2948P4MEDIUMCVSS 6.1v9.22018-07-18
CVE-2018-2948 [MEDIUM] CVE-2018-2948: Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomp
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a p
nvd
CVE-2018-2999P4MEDIUMCVSS 6.1v9.22018-07-18
CVE-2018-2999 [MEDIUM] CVE-2018-2999: Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomp
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a p
nvd
CVE-2018-2946P4MEDIUMCVSS 6.1v9.22018-07-18
CVE-2018-2946 [MEDIUM] CVE-2018-2946: Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomp
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a p
nvd
CVE-2018-2949P4MEDIUMCVSS 6.1v9.22018-07-18
CVE-2018-2949 [MEDIUM] CVE-2018-2949: Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomp
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a p
nvd
CVE-2025-30709P4MEDIUMCVSS 6.1≥ 9.2.0.0, ≤ 9.2.9.22025-04-15
CVE-2025-30709 [MEDIUM] CWE-284 CVE-2025-30709: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interacti
nvd
CVE-2025-21512P4MEDIUMCVSS 6.1fixed in 9.2.9.02025-01-21
CVE-2025-21512 [MEDIUM] CWE-601 CVE-2025-21512: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interact
nvd
CVE-2025-21527P4MEDIUMCVSS 6.1fixed in 9.2.9.02025-01-21
CVE-2025-21527 [MEDIUM] CWE-862 CVE-2025-21527: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interact
nvd
CVE-2024-21150P4MEDIUMCVSS 6.1fixed in 9.2.8.22024-07-16
CVE-2024-21150 [MEDIUM] CWE-284 CVE-2024-21150: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.8.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interact
nvd
CVE-2025-53060P4MEDIUMCVSS 6.1≥ 9.2.0.0, ≤ 9.2.9.42025-10-21
CVE-2025-53060 [MEDIUM] CWE-284 CVE-2025-53060: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interacti
nvd
CVE-2025-53056P4MEDIUMCVSS 6.1≥ 9.2.0.0, ≤ 9.2.9.42025-10-21
CVE-2025-53056 [MEDIUM] CWE-285 CVE-2025-53056: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Environment Tech). Supported versions that are affected are 9.2.0.0-9.2.9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require huma
nvd
CVE-2025-21513P4MEDIUMCVSS 6.1fixed in 9.2.9.02025-01-21
CVE-2025-21513 [MEDIUM] CWE-352 CVE-2025-21513: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interact
nvd
CVE-2025-21538P4MEDIUMCVSS 6.1fixed in 9.2.9.22025-01-21
CVE-2025-21538 [MEDIUM] CWE-352 CVE-2025-21538: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interact
nvd
CVE-2025-21514P4MEDIUMCVSS 5.3fixed in 9.2.9.02025-01-21
CVE-2025-21514 [MEDIUM] CWE-862 CVE-2025-21514: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability
nvd
CVE-2021-2375P4MEDIUMCVSS 6.1≥ 9.2.0.0, ≤ 9.2.5.32021-07-21
CVE-2021-2375 [MEDIUM] CVE-2021-2375: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a pe
nvd
CVE-2022-21409P4MEDIUMCVSS 6.1fixed in 9.2.6.32022-04-19
CVE-2022-21409 [MEDIUM] CVE-2022-21409: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). The supported version that is affected is Prior to 9.2.6.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a
nvd
CVE-2022-21631P4MEDIUMCVSS 6.1≤ 9.2.6.42022-10-18
CVE-2022-21631 [MEDIUM] CWE-79 CVE-2022-21631: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC). Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interact
nvd
CVE-2022-21630P4MEDIUMCVSS 6.1≤ 9.2.6.42022-10-18
CVE-2022-21630 [MEDIUM] CVE-2022-21630: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction fro
nvd
CVE-2023-22055P4MEDIUMCVSS 6.1fixed in 9.2.7.42023-07-18
CVE-2023-22055 [MEDIUM] CVE-2023-22055: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.7.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from
nvd
CVE-2021-32809P4MEDIUMCVSS 5.4fixed in 9.2.6.02021-08-12
CVE-2021-32809 [MEDIUM] CWE-94 CVE-2021-32809: ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckeditor.com/cke4/addon/clipboard) package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It affects all
nvd
CVE-2018-2659P4MEDIUMCVSS 6.1v9.22018-01-18
CVE-2018-2659 [MEDIUM] CVE-2018-2659: Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomp
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from
nvd