CVE-2019-2565

Vulnerability in the JD Edwards World Technical Foundation component of Oracle JD Edwards Products (subcomponent: Service Enablement). Supported versions that are affected are A9.2, A9.3.1 and A9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards World Technical Foundation. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards World Technical Foundation accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

• http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Vendor Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Vendor Advisory

Published

Apr 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25644WinMPG Video Convert 9.3.5 and older versions contain a buff…5.5
• CVE-2019-25645WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of…6.9
• CVE-2019-25646Tabs Mail Carrier 2.5.1 contains a buffer overflow vulnerabi…9.8
• CVE-2019-25647PhreeBooks ERP 5.2.3 contains a remote code execution vulner…8.8
• CVE-2019-25648MyVideoConverter Pro 3.14 contains a local buffer overflow v…6.9
• CVE-2019-25649River Past Audio Converter 7.7.16 contains a local buffer ov…6.8
• CVE-2019-25650River Past CamDo 3.7.6 contains a structured exception handl…8.6
• CVE-2019-25651Ubiquiti UniFi Network Controller prior to 5.10.12 (excludin…9
• CVE-2019-25652UniFi Network Controller before version 5.10.22 and 5.11.x b…7.7
• CVE-2019-25653Navicat for Oracle 12.1.15 contains a denial of service vuln…5.5
• CVE-2019-25654Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerab…8.7
• CVE-2019-25655Device Monitoring Studio 8.10.00.8925 contains a denial of s…5.5