CVE-2026-91294

A vulnerability exists in the Business Logic Infra SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low privileged attacker with network access via JDENET can exploit this issue to cause a partial denial of service (partial DOS) . No specific exploit details ...

CVE-2026-91293

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (component: Business Logic Infra SEC ) for Oracle JD Edwards versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via JDENET can exploit this flaw to compromise the system, potentially resulting in unauthori...

CVE-2026-91289

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Monitoring and Diagnostics SEC component. Affected supported versions range from 9.2.0.0 to 9.2.26.5 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with a...

CVE-2026-91291

A vulnerability exists in the Business Logic Infra SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise the product. Successful exploitation m...

CVE-2026-91290

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (component: Web Runtime SEC ) for Oracle JD Edwards , affecting supported versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with logon access to the infrastructure can exploit this flaw to compromise the tools, potentially g...

CVE-2026-91287

The JD Edwards EnterpriseOne Tools product (component: Enterprise Infrastructure SEC ) is vulnerable in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with access to the physical communication segment of the hardware can exploit this vulnerability to compromise the system. Successful exp...

CVE-2026-91288

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via JDENET can exploit this difficult-to-exploit vulnerability to compromise the product. Successful exploit...

CVE-2026-91286

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (specifically the Monitoring and Diagnostics SEC component) affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with access to the physical communication segment of the hardware can easily expl...

CVE-2026-91283

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards, specifically the Web Runtime SEC component, is affected by CVE-2026-91283 in versions 9.2.0.0 through 9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though the attack requires hum...

CVE-2026-91284

The Oracle JD Edwards EnterpriseOne Tools product (specifically the E1 Dev Platform Tech - UNIX component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via JDENET can exploit this vulnerability to cause a hang or a frequently repeatable crash, resulti...

CVE-2026-91281

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC ) affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw with human interaction to compromise the syste...

CVE-2026-91282

The JD Edwards EnterpriseOne Tools product (specifically the Portal SEC component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauth...

CVE-2026-91279

A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the tools, provided they can elicit human interaction from a user. Successful ...

CVE-2026-91278

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with logon access to the infrastructure where the tools execute can exploit this flaw to compromise the system. Successful exploi...

CVE-2026-91280

A vulnerability exists in the Web Runtime SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5) from Oracle JD Edwards. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, provided they can trigger the necessary human inte...

CVE-2026-91275

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A high privileged attacker with network access via SQL can exploit this difficult-to-exploit vulnerability to compromise the tools. Successful exploitation ...

CVE-2026-91273

A high-severity vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Object and Env Tech SEC component. This issue affects supported versions 9.2.0.0 through 9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily...

CVE-2026-91274

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation may lead to un...

CVE-2026-91272

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with network access via HTTPS can exploit this flaw to compromise the system. Successful exploitation may result in unauthorized ...

CVE-2026-91270

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Monitoring and Diagnostics SEC component. Impacted versions range from 9.2.0.0 to 9.2.26.5 . This is an easily exploitable vulnerability that allows a low-privileged attacker with network access ...