CVE-2025-30709

Summary

CVE-2025-30709 is a newly identified vulnerability in Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) affecting versions 9.2.0.0-9.2.9.2. This issue allows unauthenticated attackers, with network access via HTTP, to compromise the software. Successful attacks require human interaction, and the scope of impact may extend to additional products. The vulnerability enables attackers to gain unauthorized access to update, insert, or delete data, as well as read a subset of data. The base score on the Common Vulnerability Scoring System (CVSS) is 6.1, with impacts on confidentiality and integrity. The CVSS Vector is (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.