Vulnerability Details CVE-2016-0420
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.6%
CVSS Severity
CVSS v2 Score 7.8
References
- http://packetstormsecurity.com/files/138509/JD-Edwards-9.1-EnterpriseOne-Server-Create-Users.html
- http://seclists.org/fulldisclosure/2016/Aug/126
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.securitytracker.com/id/1034722
- https://www.onapsis.com/research/security-advisories/jd-edwards-server-manager-create-user
- http://packetstormsecurity.com/files/138509/JD-Edwards-9.1-EnterpriseOne-Server-Create-Users.html
- http://seclists.org/fulldisclosure/2016/Aug/126
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.securitytracker.com/id/1034722
- https://www.onapsis.com/research/security-advisories/jd-edwards-server-manager-create-user
Products affected by CVE-2016-0420
-
cpe:2.3:a:oracle:jd_edwards_products:9.1
-
cpe:2.3:a:oracle:jd_edwards_products:9.2