EUVD-2026-106424

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Package Build SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where JD Edwards EnterpriseOn...

EUVD-2026-106363

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Package Build SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where JD Edwards...

EUVD-2026-106350

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Package Build SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2026-87383

A vulnerability exists in the Package Build SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A high-privileged attacker with local access to the infrastructure can exploit this issue to compromise the software, potentially leading to a takeover of JD Edwards En...

CVE-2026-87321

A vulnerability exists in the Package Build SEC component of the Oracle JD Edwards EnterpriseOne Tools product, specifically affecting supported versions 9.2.0.0-9.2.26.5 . A high-privileged attacker with local access to the infrastructure where the tools execute can exploit this difficulty-to-ex...

CVE-2026-87309

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically affecting the Package Build SEC component in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the tools. Successful exploi...

CVE-2024-20957

Concrete details exist: CVE-2024-20957 affects JD Edwards EnterpriseOne Tools (Package Build SEC) in versions prior to 9.2.8.1. Root cause: insufficient input validation in Package Build SEC. Vector: high-privilege attacker over JDENET with network access; impact: partial DoS of JD Edwards Enterp...

CVE-2024-20957: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Package Build SEC. Supported versions that are affected are Prior to 9.2.8.1. Easily exploitable vulnerability allows high privileged attacker with network access via JDENET to compromise JD Edwards...