CVE-2024-20937

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Feb 17, 2024
Updated: Feb 20, 2024

Summary

CVE-2024-20937 is a vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically affecting versions prior to 9.2.8.1. This vulnerability can be easily exploited by a low privileged attacker with network access via HTTP, allowing them to compromise JD Edwards EnterpriseOne Tools. Successful attacks could result in unauthorized read access to a subset of accessible data within JD Edwards EnterpriseOne Tools. The CVSS 3.1 Base Score for this vulnerability is 4.3, indicating a medium level of risk in terms of confidentiality impacts. Remediation for this vulnerability involves updating to the latest version of Oracle JD Edwards that includes the necessary security patches and fixes. Organizations using affected versions should take immediate action to protect their systems and sensitive data from potential exploitation.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-20937 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options