[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhab_XT78WS5xFZ8PWIng4bHMicVEZ6ddBCEhrom-oS0":3,"g5a-family:oracle\u002Fjd_edwards_enterpriseone_tools":188,"g5a-ex:oracle\u002Fjd_edwards_enterpriseone_tools@*":189},{"success":4,"data":5},true,{"product":6,"versions":68,"topVulnerabilitiesByEpss":93,"kevVulnerabilities":155,"seoMetadata":166,"meta":185},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":67},"oracle","jd_edwards_enterpriseone_tools",24,148,2,"2025-10-21",[14,19,22,24,26,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"4.0.1.0",1,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"8.98",8,{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},"9.1",{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},"9.1.5",{"version":27,"cve_count":28,"kev_count":17,"has_kev":18},"9.2",38,{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.0.0",{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.26.0",{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.4.0",{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},"9.2.4.2",{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.5.0",{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},"9.2.5.3",{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.6.0",{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.6.1",{"version":46,"cve_count":11,"kev_count":17,"has_kev":18},"9.2.6.3",{"version":48,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.6.4",{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.7.3",{"version":52,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.7.4",{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.8.0",{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.8.1",{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.8.2",{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.9.0",{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.9.2",{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.9.3",{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.9.4","Jd Edwards Enterpriseone Tools by Oracle is a technology product with 24 tracked versions and 148 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},{"version":27,"cve_count":28,"kev_count":17,"has_kev":18},{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},{"version":46,"cve_count":11,"kev_count":17,"has_kev":18},{"version":48,"cve_count":17,"kev_count":17,"has_kev":18},{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},{"version":52,"cve_count":17,"kev_count":17,"has_kev":18},{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},[94,102,107,112,119,125,132,138,145,150],{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":99,"severity":100,"isKev":4,"epssScore":101},"CVE-2021-42013","It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration \"require all denied\", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.","2021-10-07",9.8,"v3.1","Critical",0.99964,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":98,"cvssVersion":99,"severity":100,"isKev":18,"epssScore":106},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",0.89792,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":98,"cvssVersion":99,"severity":100,"isKev":18,"epssScore":111},"CVE-2021-3711","In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).","2021-08-24",0.87816,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":99,"severity":117,"isKev":18,"epssScore":118},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,"Medium",0.8682,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":99,"severity":117,"isKev":4,"epssScore":124},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.84887,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":129,"cvssVersion":99,"severity":130,"isKev":18,"epssScore":131},"CVE-2021-22883","Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.","2021-03-03",7.5,"High",0.77385,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":136,"cvssVersion":99,"severity":117,"isKev":18,"epssScore":137},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).","2021-03-25",5.9,0.63542,{"cveId":139,"description":140,"publishedDate":141,"cvssScore":142,"cvssVersion":143,"severity":117,"isKev":18,"epssScore":144},"CVE-2015-1793","The X509_verify_cert function in crypto\u002Fx509\u002Fx509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.","2015-07-09",6.5,"v3.0",0.58447,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":129,"cvssVersion":143,"severity":130,"isKev":18,"epssScore":149},"CVE-2017-3730","In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.","2017-05-04",0.55294,{"cveId":151,"description":152,"publishedDate":153,"cvssScore":129,"cvssVersion":99,"severity":130,"isKev":18,"epssScore":154},"CVE-2020-8277","A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions \u003C 15.2.1, \u003C 14.15.1, and \u003C 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and 12.19.1.","2020-11-19",0.54164,[156,161],{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"severity":117,"isKev":4,"epssScore":124,"cisaVulnName":157,"cisaDateAdded":158,"cisaShortDescription":159,"cisaRequiredAction":160},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"severity":100,"isKev":4,"epssScore":101,"cisaVulnName":162,"cisaDateAdded":163,"cisaShortDescription":164,"cisaRequiredAction":165},"Apache HTTP Server Path Traversal Vulnerability","2021-11-03","Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default require all denied or if CGI scripts are enabled. This CVE ID resolves an incomplete patch for CVE-2021-41773.","Apply updates per vendor instructions.",{"title":167,"metaDescription":168,"keywords":169,"structuredData":170},"Jd Edwards Enterpriseone Tools by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Jd Edwards Enterpriseone Tools by Oracle covering 24 versions with 148 tracked vulnerabilities including 1 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Jd Edwards Enterpriseone Tools vulnerabilities, Jd Edwards Enterpriseone Tools security, Jd Edwards Enterpriseone Tools CVE, Oracle Jd Edwards Enterpriseone Tools, Jd Edwards Enterpriseone Tools threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Jd Edwards Enterpriseone Tools KEV, Jd Edwards Enterpriseone Tools exploited vulnerabilities",{"@context":171,"@type":172,"name":173,"description":168,"url":174,"manufacturer":175,"applicationCategory":179,"softwareVersion":180,"mainEntity":181},"https:\u002F\u002Fschema.org","SoftwareApplication","Jd Edwards Enterpriseone Tools","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fjd_edwards_enterpriseone_tools",{"@type":176,"name":177,"url":178},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","24 versions tracked",{"@type":182,"name":183,"description":184,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Jd Edwards Enterpriseone Tools Security Vulnerabilities","Security vulnerabilities affecting Jd Edwards Enterpriseone Tools by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":186,"apiVersion":187},"2026-10-17T14:37:15.588Z","3.0",[],{"rows":190,"total":11,"capped":18,"failed":17},[191,196],{"cveId":120,"name":157,"severity":117,"cvss":123,"added":158,"epss":124,"published":192,"ranges":193,"checked":4,"hits":195,"covers":18},"2020-04-29T21:15:11.743",[194],"before 9.2.5.0",[],{"cveId":95,"name":162,"severity":100,"cvss":98,"added":163,"epss":101,"published":197,"ranges":198,"checked":4,"hits":200,"covers":18},"2021-10-07T16:15:09.27",[199],"before 9.2.6.0",[]]