CVE-2024-20957

Summary

CVE-2024-20957 is a vulnerability affecting Oracle JD Edwards EnterpriseOne Tools (component: Package Build SEC) prior to version 9.2.8.1. This issue is classified as easily exploitable and allows high privileged attackers with network access via JDENET to cause a partial denial of service (partial DOS) in JD Edwards EnterpriseOne Tools. Successfully exploiting this vulnerability does not result in data breaches, but can impact the availability of the affected system. The Base Score is 2.7 (Availability impacts), with a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.