VDB
GCVE-110-NCSC-2025-26
GCVE-110-NCSC-2025-26
Advisory PublishedCVSS 7.5/10
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Weaknesses (CWE)
CWE-276Incorrect Default PermissionsCWE-754Improper Check for Unusual or Exceptional ConditionsCWE-328Use of Weak HashCWE-552Files or Directories Accessible to External PartiesCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-354Improper Validation of Integrity Check ValueCWE-400Uncontrolled Resource ConsumptionCWE-222Truncation of Security-relevant InformationCWE-476NULL Pointer DereferenceCWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-94Improper Control of Generation of Code ('Code Injection')CWE-122Heap-based Buffer OverflowCWE-601URL Redirection to Untrusted Site ('Open Redirect')
Risk Scores
CVSS 3.1
7.5/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| oracle | jd_edwards_world_security | — | — |
| oracle | jd_edwards_enterpriseone_tools | — | — |
| oracle | jd_edwards_enterpriseone_orchestrator | — | — |
Aliases
CVE-2023-2976CVE-2023-38552CVE-2023-39017CVE-2023-3961CVE-2023-4091CVE-2023-42669CVE-2023-4782CVE-2023-48795CVE-2023-5678CVE-2023-6129CVE-2024-0727CVE-2024-21245CVE-2024-22019CVE-2024-22020CVE-2024-27280CVE-2024-27281CVE-2024-27282CVE-2024-27983CVE-2024-29041CVE-2025-21507CVE-2025-21508CVE-2025-21509CVE-2025-21510CVE-2025-21511CVE-2025-21512CVE-2025-21513CVE-2025-21514CVE-2025-21515CVE-2025-21517CVE-2025-21524CVE-2025-21527CVE-2025-21538CVE-2025-21552
References
Browse GCVE Records
74,366 records in the GCVE database · Updated July 23, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.