CVE-2025-21511: High severity oracle jd edwards enterpriseone tools vulnerability
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21511?
CVE-2025-21511 is considered an easily exploitable vulnerability that poses a significant risk to affected systems.
How do I fix CVE-2025-21511?
To fix CVE-2025-21511, upgrade your JD Edwards EnterpriseOne Tools to version 9.2.9.0 or later.
What component is affected by CVE-2025-21511?
CVE-2025-21511 affects the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools product.
Who is affected by CVE-2025-21511?
Any organization using JD Edwards EnterpriseOne Tools versions prior to 9.2.9.0 is affected by CVE-2025-21511.
Can CVE-2025-21511 be exploited remotely?
Yes, CVE-2025-21511 can be exploited by an unauthenticated attacker with network access via HTTP.