23669 matches found
CVE-2026-91300
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...
CVE-2026-91290
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where JD Edwards EnterpriseOne...
CVE-2026-91279
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...
CVE-2026-91280
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...
CVE-2026-91283
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...
CVE-2026-91268
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseO...
CVE-2026-91245
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCent...
CVE-2026-91246
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCent...
CVE-2026-91247
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2026-91248
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCent...
CVE-2026-91384
The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is vulnerable in the Web Runtime SEC component (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with network access via JDENET can easily exploit this vulnerability to compromise the tools. Successful exploitation may result i...
CVE-2026-91300
A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product, provided they can trigger the nece...
CVE-2026-91298
A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with HTTP network access can exploit this flaw to compromise the tools, requiring human interaction from another user. The attack may h...
CVE-2026-91290
A vulnerability exists in the JD Edwards EnterpriseOne Tools product (component: Web Runtime SEC ) for Oracle JD Edwards , affecting supported versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with logon access to the infrastructure can exploit this flaw to compromise the tools, potentially g...
CVE-2026-91283
The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards, specifically the Web Runtime SEC component, is affected by CVE-2026-91283 in versions 9.2.0.0 through 9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though the attack requires hum...
CVE-2026-91280
A vulnerability exists in the Web Runtime SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5) from Oracle JD Edwards. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, provided they can trigger the necessary human inte...
CVE-2026-91279
A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the tools, provided they can elicit human interaction from a user. Successful ...
CVE-2026-91268
A vulnerability exists in the Web Runtime SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5) provided by Oracle JD Edwards. A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the software, potentially resulting in a complete ...
CVE-2026-91246
A vulnerability exists in the Oracle WebCenter Portal product of Oracle Fusion Middleware, specifically within the Runtime Tools component. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the portal, though successful e...
CVE-2026-91247
A vulnerability exists in the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw, though the attack is considered difficult and re...