CVE-2024-20905

Summary

CVE-2024-20905 is a vulnerability affecting Oracle JD Edwards EnterpriseInfrastructure SEC component in JD Edwards EnterpriseOne Tools prior to version 9.2.8.0. This issue is easily exploitable by high privileged attackers with network access via JDENET. Successful exploitation can lead to a partial denial of service (DoS) of JD Edwards EnterpriseOne Tools. The Base Score is 2.7 (Availability) according to the Common Vulnerability Scoring System (CVSS) version 3.1. Attackers can take advantage of this vulnerability to cause disruption to the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.