CVE-2011-3509: Medium severity oracle jd edwards enterpriseone tools vulnerability

Published Jan 18, 2012

Updated

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3524.

Affected Software

2 affected components

ORACLE JD Edwards EnterpriseOne Tools=8.98

ORACLE JD Edwards Products=8.98

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html

Event History

Jan 18, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-3509?

CVE-2011-3509 is categorized as a moderate severity vulnerability.

How do I fix CVE-2011-3509?

To address CVE-2011-3509, apply the appropriate patches provided by Oracle for JD Edwards 8.98 SP 24.

Who is affected by CVE-2011-3509?

CVE-2011-3509 affects remote authenticated users of Oracle JD Edwards EnterpriseOne Tools version 8.98.

What impact does CVE-2011-3509 have?

CVE-2011-3509 can affect the confidentiality of the data due to improper security measures.

What components of Oracle JD Edwards are involved in CVE-2011-3509?

The vulnerability is related to the EnterpriseOne Tools component and its Enterprise Infrastructure SEC.