CVE-2025-21517

Summary

CVE-2025-21517 is a vulnerability affecting Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) prior to version 9.2.9.0. This issue allows a low-privileged attacker with network access to compromise the software via HTTP. Successfully exploited attacks may result in unauthorized data manipulation, leading to insert, update, or delete access to certain JD Edwards EnterpriseOne Tools data. The impact is classified as integrity, with a CVSS Base Score of 4.3. Attackers can exploit this vulnerability without user interaction and with a low level of access to the system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.