Vulnerabilities in Oracle JD Edwards EnterpriseOne

Oracle has identified several vulnerabilities in Oracle JD Edwards EnterpriseOne Tools, specifically in versions 9.2.0.0 through 9.2.26.5. These vulnerabilities allow attackers to gain access to the system using various network protocols such as HTTP, HTTPS, and SMTP, either without authenticatio...

EUVD-2026-106638

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards...

EUVD-2026-106549

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Enterprise Infrastructure SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwar...

EUVD-2026-106420

Vulnerability in the JD Edwards EnterpriseOne Sales Order Entry product of Oracle JD Edwards component: Sales Order Entry. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards...

EUVD-2026-106422

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Business Logic Infra SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards...

EUVD-2026-106348

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Interoperability SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2026-91384

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards...

CVE-2026-91282

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Portal SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

CVE-2026-87381

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Business Logic Infra SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards...

CVE-2026-87380

Vulnerability in the JD Edwards EnterpriseOne Sales Order Entry product of Oracle JD Edwards component: Sales Order Entry. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards...

CVE-2026-87307

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Interoperability SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2026-91384

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is vulnerable in the Web Runtime SEC component (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with network access via JDENET can easily exploit this vulnerability to compromise the tools. Successful exploitation may result i...

CVE-2026-91282

The JD Edwards EnterpriseOne Tools product (specifically the Portal SEC component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauth...

CVE-2026-91270

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Monitoring and Diagnostics SEC component. Impacted versions range from 9.2.0.0 to 9.2.26.5 . This is an easily exploitable vulnerability that allows a low-privileged attacker with network access ...

CVE-2026-87381

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards (specifically the Business Logic Infra SEC component) is affected by CVE-2026-87381 in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via JDENET can exploit this vulnerability to compromise the tools. Succe...

CVE-2026-87380

The JD Edwards EnterpriseOne Sales Order Entry product (version 9.2 ) from Oracle JD Edwards is affected by a vulnerability in the Sales Order Entry component. A low-privileged attacker with network access via JDENET can easily exploit this flaw to compromise the system. Successful exploitation m...

CVE-2026-87307

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized acces...

Oracle JD Edwards EnterpriseOne General Ledger security vulnerabilities

Oracle JD Edwards EnterpriseOne General Ledger version 9.2 contains a security vulnerability stemming from an issue in the E1 Foundation component. This vulnerability may allow attackers with limited privileges to gain network access via JDENET, potentially causing service hangs or frequent...

PT-2026-119698

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Business Logic Infra SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards...

PT-2026-119628

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Package Build SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...