CVE-2016-0420

Published: Jan 21, 2016Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics.

Affected (2)

Products: Oracle: Jd Edwards Products

Oracle

1 product

Jd Edwards Products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Jd Edwards Products	Version 9.1
Oracle Jd Edwards Products	Version 9.2

References (10)

http://packetstormsecurity.com/files/138509/JD-Edwards-9.1-EnterpriseOne-Server-Create-Users.html

Source: secalert_us@oracle.com

http://seclists.org/fulldisclosure/2016/Aug/126

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securitytracker.com/id/1034722

Source: secalert_us@oracle.com

https://www.onapsis.com/research/security-advisories/jd-edwards-server-manager-create-user

Source: secalert_us@oracle.com

http://packetstormsecurity.com/files/138509/JD-Edwards-9.1-EnterpriseOne-Server-Create-Users.html