JE
Product
JD Edwards Enterpriseone Tools
On CISA KEVExploited in the wildRansomware-linked
170
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 33High 55Medium 68Low 5
Watch
Add JD Edwards Enterpriseone Tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30760 | 5.4 | Jul 15 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC) Affected: 9.2.0.0 through 9.2.9.3 |
| CVE-2025-21586 | 5.4 | Apr 15 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC) Affected: 9.2.0.0 through 9.2.9.2 |
| CVE-2025-21507 | 5.4 | Jan 21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC) Affected: before 9.2.9.0 |
| CVE-2024-21245 | 5.4 | Jan 21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC) Affected: before 9.2.9.0 |
| CVE-2023-21936 | 5.4 | Apr 18 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC) Affected: before 9.2.7.3 |
| CVE-2022-21629 | 5.4 | Oct 18 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC) Affected: through 9.2.6.4 |
| CVE-2021-37695 | 5.4 | Aug 13 | ckeditor is an open source WYSIWYG HTML editor with rich content support Affected: before 9.2.6.0 |
| CVE-2021-32809 | 5.4 | Aug 12 | ckeditor is an open source WYSIWYG HTML editor with rich content support Affected: before 9.2.6.0 |
| CVE-2021-32808 | 5.4 | Aug 12 | ckeditor is an open source WYSIWYG HTML editor with rich content support Affected: through 9.2.6.0 |
| CVE-2021-2373 | 5.4 | Jul 21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime) Affected: 9.2.0.0 through 9.2.5.3 |
| CVE-2025-21514 | 5.3 | Jan 21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC) Affected: before 9.2.9.0 |
| CVE-2021-22939 | 5.3 | Aug 16 | If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an… Affected: through 9.2.6.1 |
| CVE-2020-28500 | 5.3 | Feb 15 | Regular Expression Denial of Service (ReDoS) Affected: before 9.2.6.1 |
| CVE-2020-13956 | 5.3 | Dec 2 | Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick… Affected: before 9.2.6.0 |
| CVE-2025-21517 | 4.3 | Jan 21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC) Affected: before 9.2.9.0 |
| CVE-2024-20937 | 4.3 | Feb 17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC) Affected: before 9.2.8.1 |
| CVE-2023-21927 | 4.3 | Apr 18 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC) Affected: before 9.2.7.3 |
| CVE-2019-2564 | 4.3 | Apr 23 | Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime) Affected: 9.2 |