CVE-2011-2321: Medium severity oracle jd edwards enterpriseone tools vulnerability

Published Jan 18, 2012

Updated

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDNET).

Affected Software

2 affected components

ORACLE JD Edwards EnterpriseOne Tools=8.98

ORACLE JD Edwards Products=8.98

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html

Event History

Jan 18, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2321?

The severity of CVE-2011-2321 is not explicitly classified, but it involves a potential confidentiality impact for authenticated users.

How do I fix CVE-2011-2321?

To fix CVE-2011-2321, it is recommended to apply the latest patches provided by Oracle for JD Edwards EnterpriseOne Tools.

Who is affected by CVE-2011-2321?

CVE-2011-2321 affects remote authenticated users of Oracle JD Edwards EnterpriseOne Tools version 8.98.

What type of vulnerability is CVE-2011-2321?

CVE-2011-2321 is an unspecified vulnerability related to the confidentiality of information in the EnterpriseOne Tools component.

When was CVE-2011-2321 disclosed?

CVE-2011-2321 was disclosed in 2011 and is part of the Oracle JD Edwards product vulnerability announcements.