CVE-2020-2733

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1450%

EPSS Percentile37.01th

Published2020年4月15日

Last Modified2024年11月21日

Vulnerability Description

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected Platforms (CPE)

📦

Oracle

Jd Edwards Enterpriseone Tools

= 9.2

References & Advisories

🔗 https://www.oracle.com/security-alerts/cpuapr2020.html

Vulnerability Description

Affected Platforms (CPE)

Jd Edwards Enterpriseone Tools

References & Advisories

相关漏洞威胁