CVE-2025-30740

Summary

CVE-2025-30740 is a vulnerability affecting Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) versions 9.2.0.0-9.2.9.2. This issue allows low-privileged attackers to gain unauthorized access to critical data or take complete control of all accessible data via network access through HTTP. With a CVSS 3.1 Base Score of 6.5 (Confidentiality impacts), this easily exploitable flaw poses a significant risk to organizations using the affected JD Edwards EnterpriseOne Tools. Attackers can potentially compromise the system and steal sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.