CVE-2025-21538

Summary

CVE-2025-21538 is a vulnerability affecting the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (Web Runtime SEC component). This issue, with a CVSS Base Score of 6.1, is found in versions prior to 9.2.9.2. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise JD Edwards EnterpriseOne Tools. While the impact is initially on this software, the attack may also affect additional products. Successful attacks can lead to unauthorized update, insert, or delete access to some data, as well as unauthorized read access to a subset of data within JD Edwards EnterpriseOne Tools. Attacks require human interaction and can result in significant confidentiality and integrity impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.