ulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujan2025.html | Vendor Advisory |
17 Mar 2025, 19:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oracle jd Edwards Enterpriseone Tools
Oracle |
|
| CPE | cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* | |
| References | () https://www.oracle.com/security-alerts/cpujan2025.html - Vendor Advisory |
31 Jan 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-306 | |
| Summary |
|
21 Jan 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Published : 2025-01-21 21:15
Updated : 2025-03-17 19:49
NVD link : CVE-2025-21524
Mitre link : CVE-2025-21524
CVE.ORG link : CVE-2025-21524
JSON object : View
Missing Authentication for Critical Function