Oracle Enterpriseone vulnerabilities

11 CVEs affecting Oracle Enterpriseone, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-1829, published 2008-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-0552, published 2006-02-04. High severity, CVSS 7.5. EPSS: 4.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln#…
CVE-2006-1887, published 2006-04-20. High severity, CVSS 10.0. EPSS: 4.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Security Server 8.95.J1 has unknown impact and attack vectors, aka Vuln# JDE01.
CVE-2006-0281, published 2006-01-18. High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle JD Edwards HTML Server 8.95.F1 SP23_L1 has unspecified impact and attack vectors, as identified by Oracle Vuln# JDE01.
CVE-2006-3724, published 2006-07-21. High severity, CVSS 10.0. EPSS: 4.1% chance of exploitation in the next 30 days. Unspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools 8.95 and 8.96 has unknown impact and attack vectors, aka Oracle Vuln# JDE01.
CVE-2007-0297, published 2007-01-17. Medium severity, CVSS 4.0. EPSS: 3.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE03.
CVE-2005-3465, published 2005-11-02. High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. Unspecified vulnerability in JDEdwards HTML Server in Oracle EnterpriseOne 8.94 OneWorld XE up to 8.95_B1, 8.94_Q1, and SP23_K1 has unknown impact and attack vectors, as identified by Oracle Vuln#…
CVE-2006-5378, published 2006-10-18. High severity, CVSS 9.0. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln# JDE01.
CVE-2007-0295, published 2007-01-17. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13 and 8.47.11 has unknown impact and attack vectors in PeopleTools, aka PSE01.
CVE-2008-1829, published 2008-04-16. High severity, CVSS 9.0. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote attack vectors, aka PSE02.
CVE-2007-0296, published 2007-01-17. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13, 8.47.11, and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE02.

Latest

CVE-2007-2134, published 2007-04-18. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the HTML Server in Oracle JD Edwards EnterpriseOne SP23_Q1 and 8.96.I1 has unknown impact and local attack vectors, aka JDE01.