A remote unauthenticated or authenticated attacker can exploit multiple vulnerabilities in Oracle JD Edwards to compromise confidentiality, integrity, and availability.