CVE-2025-21524

Summary

CVE-2025-21524 is a critical vulnerability affecting the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (prior to version 9.2.9.0). This easily exploitable issue allows unauthenticated attackers, with only network access via HTTP, to compromise the JD Edwards EnterpriseOne Tools. The consequences of a successful exploit can lead to a complete takeover of the system, resulting in significant risks to confidentiality, integrity, and availability. The CVSS Base Score is 9.8, highlighting the high severity of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.