A vulnerability was found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.8.2. It has been declared as critical. This vulnerability affects unknown code of the component Web Runtime SEC. The manipulation leads to improper authorization.
This vulnerability was named CVE-2025-21507. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.