CVE-2025-21512

Summary

CVE-2025-21512 is a vulnerability affecting the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically the Web Runtime SEC component. Versions prior to 9.2.9.0 are impacted. An unauthenticated attacker with network access via HTTP can exploit this easily exploitable vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data for certain JD Edwards EnterpriseOne Tools. Successful attacks may require human interaction and could potentially impact additional products, with a base CVSS score of 6.1 for both confidentiality and integrity impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.