CVE-2019-2564

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

• http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Vendor Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Vendor Advisory

Published

Apr 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25634Base64 Decoder 1.1.2 contains a stack-based buffer overflow …7.8
• CVE-2019-25635Zeeways Matrimony CMS contains multiple SQL injection vulner…8.8
• CVE-2019-25636Zeeways Jobsite CMS contains an SQL injection vulnerability …8.2
• CVE-2019-25637X-NetStat Pro 5.63 contains a local buffer overflow vulnerab…8.6
• CVE-2019-25638Meeplace Business Review Script contains an SQL injection vu…7.1
• CVE-2019-25639Matrimony Website Script M-Plus contains multiple SQL inject…8.8
• CVE-2019-25640Inout Article Base CMS contains SQL injection vulnerabilitie…8.8
• CVE-2019-25641Netartmedia Vlog System contains an SQL injection vulnerabil…8.8
• CVE-2019-25642Bootstrapy CMS contains multiple SQL injection vulnerabiliti…8.8
• CVE-2019-25643eNdonesia Portal v8.7 contains multiple SQL injection vulner…8.8
• CVE-2019-25644WinMPG Video Convert 9.3.5 and older versions contain a buff…5.5
• CVE-2019-25645WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of…6.9