Oracle JD Edwards EnterpriseOne Orchestrator Vulnerability in E1 IOT Orchestrator Security Allowing Unauthorized Data Access

A vulnerability exists in Oracle JD Edwards EnterpriseOne Orchestrator, specifically in the E1 IOT Orchestrator Security component, affecting versions prior to 9.2.9.2. This easily exploitable vulnerability allows low-privileged attackers with network access via HTTP to compromise the Orchestrator. Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible through JD Edwards EnterpriseOne Orchestrator.

Impact

Exploitation of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Orchestrator accessible data.