CVE-2025-21509

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 21, 2025

Summary

CVE-2025-21509 is a vulnerability affecting the Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC component) prior to version 9.2.9.0. This issue is classified as easily exploitable and allows a low-privileged attacker with network access via HTTP to cause a hang or frequently repeatable crash of JD Edwards EnterpriseOne Tools, resulting in a Denial of Service (DoS) attack. The Base Score is 6.5 (Availability impacts) with a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Oracle JD Edwards EnterpriseOne Tools

Affected Vendors

BonqDAO

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/2rH_uI
https://www.cve.org/CVERecord?id=CVE-2025-21509
https://nvd.nist.gov/vuln/detail/CVE-2025-21509

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners