CVE-2026-91302

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically within the Enterprise Infrastructure SEC component. Affected versions range from 9.2.0.0 to 9.2.26.5 . An unauthenticated attacker with access to the underlying infrastructure can exploit this ...

CVE-2026-91295

A vulnerability exists in the Enterprise Infrastructure SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in a complete takeover of...

CVE-2026-91296

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Enterprise Infrastructure SEC component. This affects supported versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability t...

CVE-2026-91287

The JD Edwards EnterpriseOne Tools product (component: Enterprise Infrastructure SEC ) is vulnerable in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with access to the physical communication segment of the hardware can exploit this vulnerability to compromise the system. Successful exp...

CVE-2026-91281

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC ) affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw with human interaction to compromise the syste...

CVE-2026-91269

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC ) affects versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation ...

CVE-2026-91265

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a critical vulnerability in the Enterprise Infrastructure SEC component. This issue impacts supported versions 9.2.0.0 through 9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this...

CVE-2026-87333

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (component: Enterprise Infrastructure SEC ) from Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with logon access to the infrastructure where the tools execute can exploit this difficult-to-ex...

CVE-2026-87328

A vulnerability exists in the Enterprise Infrastructure SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via JDENET can exploit this difficult-to-exploit flaw to compromise the product. Successful exploit...

CVE-2026-87329

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC ) affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit vulnerability to comp...

CVE-2026-87327

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this difficult-to-exploit vulnera...

CVE-2026-87325

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically within the Enterprise Infrastructure SEC component. Affected versions include 9.2.0.0-9.2.26.5 . This high-complexity vulnerability allows a low-privileged attacker with network access via JDEN...

CVE-2026-87326

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Enterprise Infrastructure SEC component. Specifically, versions 9.2.0.0 through 9.2.26.5 are impacted. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access ...

CVE-2026-87324

A vulnerability exists in the Enterprise Infrastructure SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with network access via JDENET can exploit this difficult-to-exploit flaw to cause a complete Denial of Service (DoS) by hanging or crash...

CVE-2026-87318

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards (specifically the Enterprise Infrastructure SEC component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with local access to the infrastructure where the tools execute can exploit this difficult-to-exploit v...

CVE-2026-87319

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Enterprise Infrastructure SEC component. Affected versions include 9.2.0.0-9.2.26.5 . A low privileged attacker with logon access to the infrastructure where the tools execute can e...

CVE-2026-87317

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (specifically the Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SMTP to compromise the ...

CVE-2026-87315

The Oracle JD Edwards EnterpriseOne Tools product, specifically the Enterprise Infrastructure SEC component, is affected by CVE-2026-87315 in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful ex...

CVE-2026-87316

A vulnerability exists in the Enterprise Infrastructure SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). An attacker with low privileges and local access to the infrastructure can exploit this flaw to compromise the tool, potentially leading to a full takeover ...

CVE-2026-87312

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically within the Enterprise Infrastructure SEC component. Affected supported versions range from 9.2.0.0 to 9.2.26.5 . A low privileged attacker with network access via JDENET could exploit this diff...