Cyber Resilience

CVE-2024-21168

Oracle Jd Edwards Enterpriseone Orchestrator ≤ 9.2.8.3

Published
16 July 2024
Modified
05 December 2024
Patch / advisory
View advisory
CVSS Score v3.1 6.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0048 39th percentile
Risk Priority 50 floored blend · peak EPSS

Summary

CVE-2024-21168 is a medium-severity an unspecified weakness vulnerability in Oracle Jd Edwards Enterpriseone Orchestrator. Its CVSS base score is 6.5 (Medium).

Operationally, ranked at the 39th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are Prior to 9.2.8.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

more

JD Edwards EnterpriseOne Orchestrator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Orchestrator accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2025-21552Same product: Oracle Jd Edwards Enterpriseone Orchestrator
CVE-2023-22050Same product: Oracle Jd Edwards Enterpriseone Orchestrator
CVE-2026-46781Same vendor: Oracle
CVE-2026-60799Same vendor: Oracle
CVE-2024-21133Same vendor: Oracle
CVE-2026-21959Same vendor: Oracle
CVE-2023-22042Same vendor: Oracle
CVE-2026-35251Same vendor: Oracle
CVE-2026-21952Same vendor: Oracle
CVE-2024-21098Same vendor: Oracle

Affected Assets

oracle
jd edwards enterpriseone orchestrator
≤ 9.2.8.3

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References