Jd Edwards Enterpriseone Configurator
Monthly
Oracle JD Edwards EnterpriseOne Configurator 9.2 exposes its Configuration Management component to a medium-severity network attack over HTTP that can cause repeated crashes or hangs alongside limited unauthorized data read and write. A low-privileged attacker who can reach the application over the network may - under high-complexity conditions - deny service to all Configurator users and access or modify a subset of configuration data. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; the high attack complexity materially reduces the likelihood of opportunistic mass exploitation.
Oracle JD Edwards EnterpriseOne Configurator 9.2 exposes its Configuration Management component to a medium-severity network attack over HTTP that can cause repeated crashes or hangs alongside limited unauthorized data read and write. A low-privileged attacker who can reach the application over the network may - under high-complexity conditions - deny service to all Configurator users and access or modify a subset of configuration data. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; the high attack complexity materially reduces the likelihood of opportunistic mass exploitation.