CVE-2011-3524: Medium severity oracle jd edwards enterpriseone tools vulnerability

Published Jan 18, 2012

Updated

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3509.

Affected Software

2 affected components

ORACLE JD Edwards EnterpriseOne Tools=8.98

ORACLE JD Edwards Products=8.98

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html

Event History

Jan 18, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-3524?

CVE-2011-3524 is classified as a medium severity vulnerability affecting Oracle JD Edwards.

How do I fix CVE-2011-3524?

To mitigate CVE-2011-3524, it is recommended to apply the latest patches provided by Oracle for Oracle JD Edwards 8.98.

Who is impacted by CVE-2011-3524?

CVE-2011-3524 affects remote authenticated users of Oracle JD Edwards EnterpriseOne Tools version 8.98.

What component is affected by CVE-2011-3524?

The vulnerability is found in the EnterpriseOne Tools component of Oracle JD Edwards.

Is CVE-2011-3524 related to other vulnerabilities?

CVE-2011-3524 is related to other vulnerabilities such as CVE-2011-2325, CVE-2011-2326, and CVE-2011-3509, but it is distinct from them.