CVE-2011-2326: Medium severity oracle jd edwards enterpriseone tools vulnerability

Published Jan 18, 2012

Updated

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524.

Affected Software

2 affected components

ORACLE JD Edwards EnterpriseOne Tools=8.98

ORACLE JD Edwards Products=8.98

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html

Event History

Jan 18, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2326?

CVE-2011-2326 is considered a vulnerability affecting the confidentiality of the system.

How do I fix CVE-2011-2326?

To mitigate CVE-2011-2326, it is recommended to apply the latest security patches provided by Oracle.

Who is affected by CVE-2011-2326?

CVE-2011-2326 affects remote authenticated users of Oracle JD Edwards EnterpriseOne Tools version 8.98.

What component is involved in CVE-2011-2326?

CVE-2011-2326 involves the EnterpriseOne Tools component within Oracle JD Edwards.

Does CVE-2011-2326 relate to other vulnerabilities?

CVE-2011-2326 is distinct from vulnerabilities CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524.