Oracle JD Edwards Web Runtime SEC Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the JD Edwards EnterpriseOne Tools product, specifically within the Web Runtime SEC component. This issue affects versions prior to 9.2.9.0. The vulnerability is easily exploitable, allowing a low-privileged attacker with network access via HTTP to disrupt JD Edwards EnterpriseOne Tools. Successful exploitation can lead to a complete hang or a frequently repeatable crash of the application.

Impact

Exploitation of this vulnerability can cause JD Edwards EnterpriseOne Tools to hang or crash, leading to a complete denial-of-service condition.