Oracle Jd Edwards Products vulnerabilities

18 CVEs affecting Oracle Jd Edwards Products, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-0425, published 2016-01-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0420, published 2016-01-21. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to…
CVE-2016-0423, published 2016-01-21. High severity, CVSS 7.3. EPSS: 3.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via…
CVE-2016-0424, published 2016-01-21. High severity, CVSS 7.1. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise…
CVE-2016-0422, published 2016-01-21. High severity, CVSS 7.1. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise…
CVE-2016-0421, published 2016-01-21. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Monitoring…
CVE-2016-0425, published 2016-01-21. Medium severity, CVSS 6.0. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality, integrity, and…
CVE-2015-4919, published 2016-01-21. Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via…
CVE-2015-0475, published 2015-04-16. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors…
CVE-2011-2324, published 2012-01-18. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC (JDENET).
CVE-2011-3524, published 2012-01-18. Medium severity, CVSS 4.0. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC…

Latest

CVE-2014-6516, published 2014-10-15. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98 allows local users to affect confidentiality, integrity, and availability via vectors…
CVE-2012-1678, published 2013-01-17. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98, 9.1, and 24 allows remote authenticated users to affect confidentiality, related to…