CVE-2016-0423
First published: Thu Jan 21 2016(Updated: )
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Enterprise Infrastructure SEC.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Multiple Products | =9.1 | |
| Oracle Multiple Products | =9.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/138512/JD-Edwards-9.1-EnterpriseOne-Server-JDENET-Denial-Of-Service.html
- http://seclists.org/fulldisclosure/2016/Aug/128
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.securitytracker.com/id/1034722
- https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-end-file-dos
Frequently Asked Questions
What is the severity of CVE-2016-0423?
CVE-2016-0423 is classified as a high-severity vulnerability that can impact confidentiality, integrity, and availability.
How do I fix CVE-2016-0423?
To fix CVE-2016-0423, you should apply the recommended security patches provided by Oracle for JD Edwards Products 9.1 and 9.2.
What types of attacks could exploit CVE-2016-0423?
CVE-2016-0423 can be exploited through various vectors related to the Enterprise Infrastructure SEC, enabling potential unauthorized access or denial of service.
Which versions of Oracle JD Edwards Products are affected by CVE-2016-0423?
CVE-2016-0423 affects Oracle JD Edwards Products version 9.1 and version 9.2.
Is there a workaround for CVE-2016-0423 if I cannot apply the patch immediately?
There are no official workarounds documented for CVE-2016-0423, so applying the patch is strongly recommended as the best mitigation strategy.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle multiple products
- version/oracle multiple products/9.1
- version/oracle multiple products/9.2