CVE-2011-2325: Medium severity oracle jd edwards enterpriseone tools vulnerability

Published Jan 18, 2012

Updated

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524.

Affected Software

2 affected components

ORACLE JD Edwards EnterpriseOne Tools=8.98

ORACLE JD Edwards Products=8.98

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html

Event History

Jan 18, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2325?

The severity of CVE-2011-2325 is currently unknown as it is an unspecified vulnerability.

How do I fix CVE-2011-2325?

To fix CVE-2011-2325, apply the latest security patches provided by Oracle for JD Edwards EnterpriseOne Tools version 8.98.

Who is affected by CVE-2011-2325?

CVE-2011-2325 affects remote authenticated users of Oracle JD Edwards EnterpriseOne Tools version 8.98.

What component is impacted by CVE-2011-2325?

CVE-2011-2325 impacts the EnterpriseOne Tools component within Oracle JD Edwards.

Is CVE-2011-2325 related to other vulnerabilities?

Yes, CVE-2011-2325 is related to different vulnerabilities such as CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524.