CVE-2021-2052

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). The supported version that is affected is Prior to 9.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Orchestrator. While the vulnerability is in JD Edwards EnterpriseOne Orchestrator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Orchestrator accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory

Published

Jan 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20510IBM Security Verify Access Docker 10.0.0 stores user credent…4.4
• CVE-2021-20511IBM Security Verify Access Docker 10.0.0 could allow a remot…4.9
• CVE-2021-20515IBM Informix Dynamic Server 14.10 is vulnerable to a stack b…6.7
• CVE-2021-20517IBM WebSphere Application Server Network Deployment 8.5 and …8.8
• CVE-2021-20518IBM Jazz Foundation Products are vulnerable to cross-site sc…5.4
• CVE-2021-20519IBM Jazz Team Server products are vulnerable to cross-site s…5.4
• CVE-2021-20520IBM Jazz Foundation Products are vulnerable to cross-site sc…5.4
• CVE-2021-20523IBM Security Verify Access Docker 10.0.0 could allow a remot…2.7
• CVE-2021-20524IBM Security Verify Access Docker 10.0.0 is vulnerable to cr…4.8
• CVE-2021-20526IBM Planning Analytics 2.0 could allow a remote attacker to …5.3
• CVE-2021-20527IBM Resilient SOAR V38.0 could allow a privileged user to cr…7.2
• CVE-2021-20528IBM Control Center 6.2.0.0 is vulnerable to cross-site scrip…5.4