Volerion logoVolerion
Volerion logoVolerion

Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC Vulnerability Allowing Unauthorized Data Access and Modification

Vulnerability

A vulnerability has been identified in the JD Edwards EnterpriseOne Tools product, specifically in the Web Runtime SEC component. This issue affects versions 9.2.0.0 through 9.2.9.3. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Exploitation of this vulnerability could lead to unauthorized read access to certain subsets of accessible data, as well as unauthorized update, insert, or delete access to other accessible data within JD Edwards EnterpriseOne Tools.

Impact

Exploitation of this vulnerability could result in unauthorized access to read, update, insert, or delete data within JD Edwards EnterpriseOne Tools.

Added: Jul 15, 2025, 11:02 PM
Updated: Jul 15, 2025, 11:02 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
1.3
exploitability
4.9
remediation
0.0
relevance
0.3
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.