JD Edwards EnterpriseOne CRM Foundation vulnerabilities

3 known vulnerabilities in JD Edwards EnterpriseOne CRM Foundation from Oracle. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  JD Edwards EnterpriseOne CRM Foundation: Missing Authentication for Critical Functionality

  CVE-2026-60497Jul 21, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDEN

• 8.8 High severity

  JD Edwards EnterpriseOne CRM Foundation: Improper Access Control

  CVE-2026-60490Jul 21, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t

• 8.8 High severity

  JD Edwards EnterpriseOne CRM Foundation: Missing Authentication for Critical Functionality

  CVE-2026-60489Jul 21, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t