SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2015-0475

Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security.

MEDIUM 4.0EPSS 1.41%

Does this matter?

Lower severity and a low EPSS score (1.41%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security.

CVSS 2.0
4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
EPSS
1.41% probability · 71th percentile
CISA KEV
Not listed
Affected
oracle/jd edwards products
Source
secalert_us@oracle.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.