CVE-2019-2564 — Oracle Corporation / JD Edwards EnterpriseOne Tools

Description (CNA)

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected (CNA)

Vendor / product	Versions
Oracle Corporation / JD Edwards EnterpriseOne Tools	affected 9.2

CWE

No CWE identifiers supplied.

References

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

ADP enrichment

CVE

No English description supplied.

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

CISA-ADP

No English description supplied.

No references supplied.