CVEvulnerability
CVE-2016-0422
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Description
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0424.
Affected configurations
• oracle jd edwards products 9.1
• oracle jd edwards products 9.2
References
- http://packetstormsecurity.com/files/138507/JD-Edwards-9.1-EnterpriseOne-Server-JDENet-Password-Disclosure.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2016/Aug/124 seclists.org
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html Vendor Advisory
- http://www.securitytracker.com/id/1034722 www.securitytracker.com
- https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-password-disclosure www.onapsis.com
- http://packetstormsecurity.com/files/138507/JD-Edwards-9.1-EnterpriseOne-Server-JDENet-Password-Disclosure.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2016/Aug/124 seclists.org
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html Vendor Advisory
- http://www.securitytracker.com/id/1034722 www.securitytracker.com
- https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-password-disclosure www.onapsis.com