CVE-2011-0836 Other in n/a

What is CVE-2011-0836?

CVE-2011-0836 is a low-severity vulnerability in n/a, published on 20 Apr 2011. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote authenticated users to affect integrity, related to Web Runtime SEC.

Which versions are affected by CVE-2011-0836?

It affects 6 products.

Products include Oracle Enterpriseone Tools, Oracle Jd Edwards Enterpriseone, Oracle Jd Edwards Enterpriseone Ep, Oracle Oneworld Tools, Oracle Peoplesoft and Jdedwards Product Suite, Oracle Peoplesoft and Jdedwards Suite Scm.

How do I fix CVE-2011-0836?

No fix has been published for CVE-2011-0836 yet. Limit exposure of the affected software until one is available.

Is CVE-2011-0836 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2011-0836 exists.

Public exploit code: 5 Exploit-DB entries.

Other vulnerabilities in n/a

• CVE-2011-0825 Other in n/a Medium 6.8
• CVE-2011-0824 Other in n/a Medium 6.4
• CVE-2011-0803 Other in n/a Medium 5.8
• CVE-2011-0810 Denial of service in n/a Medium 5.0
• CVE-2011-0818 Denial of service in n/a Medium 5.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-88wc-387v-hhv7.