Jd Edwards Enterpriseone General Ledger
Monthly
Denial-of-service and partial data tampering in Oracle JD Edwards EnterpriseOne General Ledger 9.2 (E1 Foundation component) lets a remote, unauthenticated attacker reach the application over HTTP to cause a complete hang or repeatable crash, plus limited unauthorized read and write access to General Ledger data. The CVSS 3.1 base score is 7.0 with high attack complexity, meaning exploitation is possible without credentials but not trivially repeatable. There is no public exploit identified at time of analysis, no CISA KEV listing, and no EPSS score supplied in the input.
Privilege escalation and full takeover of Oracle JD Edwards EnterpriseOne General Ledger 9.2 (E1 Foundation component) is possible by a low-privileged network attacker via SMB, with scope change to other products. No public exploit identified at time of analysis, but the CVSS 9.9 score and 'easily exploitable' vendor characterization make this a high-priority patching target for ERP operators.
Denial-of-service and partial data tampering in Oracle JD Edwards EnterpriseOne General Ledger 9.2 (E1 Foundation component) lets a remote, unauthenticated attacker reach the application over HTTP to cause a complete hang or repeatable crash, plus limited unauthorized read and write access to General Ledger data. The CVSS 3.1 base score is 7.0 with high attack complexity, meaning exploitation is possible without credentials but not trivially repeatable. There is no public exploit identified at time of analysis, no CISA KEV listing, and no EPSS score supplied in the input.
Privilege escalation and full takeover of Oracle JD Edwards EnterpriseOne General Ledger 9.2 (E1 Foundation component) is possible by a low-privileged network attacker via SMB, with scope change to other products. No public exploit identified at time of analysis, but the CVSS 9.9 score and 'easily exploitable' vendor characterization make this a high-priority patching target for ERP operators.