CVE-2025-30740: Medium severity oracle jd edwards enterpriseone tools vulnerability
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30740?
CVE-2025-30740 is classified as an easily exploitable vulnerability that poses a significant risk to affected systems.
How do I fix CVE-2025-30740?
To fix CVE-2025-30740, apply the latest security patches provided by Oracle for JD Edwards EnterpriseOne Tools version 9.2.0.0 to 9.2.9.2.
Who is affected by CVE-2025-30740?
CVE-2025-30740 affects users of Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.9.2.
What are the common attack vectors for CVE-2025-30740?
The common attack vector for CVE-2025-30740 is low privileged attackers exploiting network access via HTTP.
What is the product component affected by CVE-2025-30740?
CVE-2025-30740 affects the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools.