CVE-2025-21514

Summary

CVE-2025-21514 is a vulnerability affecting Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) prior to version 9.2.9.0. This easily exploitable issue permits unauthenticated attackers with network access via HTTP to gain unauthorized read access to a subset of the JD Edwards EnterpriseOne Tools data. The impact of this vulnerability is rated as low confidentiality, with a CVSS Base Score of 5.3. Attackers can potentially read sensitive information without requiring authentication credentials. This issue should be addressed promptly to prevent potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.