CVE-2011-0818 Denial of service in n/a
Remote attackers can disrupt availability of Oracle JD Edwards EnterpriseOne Tools via the Enterprise Infrastructure SEC component.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2011-0818?
CVE-2011-0818 is a medium-severity denial of service vulnerability in n/a, published on 20 Apr 2011. It can be exploited over the network.
Official description
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC.
Which versions are affected by CVE-2011-0818?
It affects 6 products.
Products include Oracle Enterpriseone Tools, Oracle Jd Edwards Enterpriseone, Oracle Jd Edwards Enterpriseone Ep, Oracle Oneworld Tools, Oracle Peoplesoft and Jdedwards Product Suite, Oracle Peoplesoft and Jdedwards Suite Scm.
How do I fix CVE-2011-0818?
No fix has been published for CVE-2011-0818 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2011-0818 being exploited?
There is no known exploitation of CVE-2011-0818 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-mff3-87fp-5r9j.