Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC Vulnerability Allowing Unauthorized Data Access

A vulnerability has been identified in the JD Edwards EnterpriseOne Tools product, specifically within the Web Runtime SEC component. This issue affects versions 9.2.0.0 through 9.2.9.2. The vulnerability is easily exploitable, allowing a low-privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful exploitation can lead to unauthorized access to critical data or complete access to all data within JD Edwards EnterpriseOne Tools that is accessible to the user.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data or complete access to all JD Edwards EnterpriseOne Tools data that is accessible to the user.