CVE-2024-20937

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-20937
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are Prior to 9.2.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
CVSS

No CVSS.

References
Link Resource
https://www.oracle.com/security-alerts/cpujan2024.html Vendor Advisory
https://www.oracle.com/security-alerts/cpujan2024.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
History

29 Nov 2024, 14:08

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 4.3 		v2 : unknown
v3 : unknown
First Time Oracle
Oracle jd Edwards Enterpriseone Tools
References () https://www.oracle.com/security-alerts/cpujan2024.html - () https://www.oracle.com/security-alerts/cpujan2024.html - Vendor Advisory
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*

17 Feb 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-17 02:15

Updated : 2025-03-27 22:15

NVD link : CVE-2024-20937

Mitre link : CVE-2024-20937

JSON object : View

Products Affected

oracle

  • jd_edwards_enterpriseone_tools
CWE
NVD-CWE-noinfo