JE
Product
JD Edwards Enterpriseone Tools
On CISA KEVExploited in the wildRansomware-linked
170
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 33High 55Medium 68Low 5
Watch
Add JD Edwards Enterpriseone Tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-28500 | 5.3 | Feb 15 | Regular Expression Denial of Service (ReDoS) Affected: before 9.2.6.1 |
| CVE-2020-13956 | 5.3 | Dec 2 | Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick… Affected: before 9.2.6.0 |
| CVE-2025-21517 | 4.3 | Jan 21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC) Affected: before 9.2.9.0 |
| CVE-2024-20937 | 4.3 | Feb 17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC) Affected: before 9.2.8.1 |
| CVE-2023-21927 | 4.3 | Apr 18 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC) Affected: before 9.2.7.3 |
| CVE-2019-2564 | 4.3 | Apr 23 | Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime) Affected: 9.2 |
| CVE-2026-60628 | 3.7 | Jul 21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security) Affected: 9.2.26.3 |
| CVE-2026-60346 | 3.7 | Jul 21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability Security) Affected: 9.2.26.3 |
| CVE-2026-60347 | 3.6 | Jul 21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security) Affected: 9.2.26.3 |
| CVE-2024-20905 | 2.7 | Feb 17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC) Affected: before 9.2.8.0 |
| CVE-2024-20957 | 2.7 | Jan 16 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC) Affected: before 9.2.8.1 |
| CVE-2014-6565 | – | Jan 21 | Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and… Affected: 9.1.5 |
| CVE-2011-3524 | – | Jan 18 | Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise… Affected: 8.98 |
| CVE-2011-3514 | – | Jan 18 | Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise… Affected: 8.98 |
| CVE-2011-3509 | – | Jan 18 | Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise… Affected: 8.98 |
| CVE-2011-2326 | – | Jan 18 | Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise… Affected: 8.98 |
| CVE-2011-2325 | – | Jan 18 | Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise… Affected: 8.98 |
| CVE-2011-2324 | – | Jan 18 | Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure… Affected: 8.98 |
| CVE-2011-2321 | – | Jan 18 | Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise… Affected: 8.98 |
| CVE-2011-2317 | – | Jan 18 | Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise… Affected: 8.98 |