JD Edwards EnterpriseOne Tools vulnerabilities

65 known vulnerabilities in JD Edwards EnterpriseOne Tools from Oracle. 64 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  JD Edwards EnterpriseOne Tools: URL Redirection to Untrusted Site

  CVE-2026-91328Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastr

• 7.5 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91327Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to th

• 8.8 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91326Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows unauthenticated attacker with access to the

• 7.5 High severity

  JD Edwards EnterpriseOne Tools: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-91325Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 7.8 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91315Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with logon to the i

• 7.8 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91314Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with logon to the i

• 8.1 High severity

  JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

  CVE-2026-91313Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.4. Difficult to exploit vulnerability allows unauthenticated attacker with network acce

• 7.8 High severity

  JD Edwards EnterpriseOne Tools: Improper Privilege Management

  CVE-2026-91311Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the in

• 8.8 High severity

  JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

  CVE-2026-91310Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via J

• 7.5 High severity

  JD Edwards EnterpriseOne Tools: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-91308Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 7.5 High severity

  JD Edwards EnterpriseOne Tools: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-91307Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 7.8 High severity

  JD Edwards EnterpriseOne Tools: Improper Privilege Management

  CVE-2026-91306Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the in

• 9.1 Critical severity

  JD Edwards EnterpriseOne Tools: Improper Authentication

  CVE-2026-91305Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 7.8 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91304Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with logon to the i

• 8.8 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91303Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 8.8 High severity

  JD Edwards EnterpriseOne Tools: URL Redirection to Untrusted Site

  CVE-2026-91296Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with networ

• 8.8 High severity

  JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

  CVE-2026-91295Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network

• 7.4 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91288Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network acces

• 8.1 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91287Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with access

• 8.2 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91286Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with acces

• 8.6 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91273Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 7.4 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91272Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network acces

• 8.1 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91271Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with networ

• 8.8 High severity

  JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

  CVE-2026-91270Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with networ

• 8.1 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91269Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network

• 8.8 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91268Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HT

• 8.6 High severity

  JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

  CVE-2026-91267Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 8.4 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-91266Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon

• 9.1 Critical severity

  JD Edwards EnterpriseOne Tools: Improper Authentication

  CVE-2026-91265Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with networ

• 7.8 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-87316Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon t

• 7.5 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-87315Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with networ

• 7.4 High severity

  JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

  CVE-2026-87314Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network acces

• 8.8 High severity

  JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

  CVE-2026-87313Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access v

• 7.5 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-87312Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privileged attacker with netwo

• 8.8 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-87310Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Database and Comm SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.1 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-87309Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.1 High severity

  JD Edwards EnterpriseOne Tools: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-87308Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon t

• 7.1 High severity

  JD Edwards EnterpriseOne Tools: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-87307Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access v

• 8.1 High severity

  JD Edwards EnterpriseOne Tools: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-87306Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access v

• 8.1 High severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-87305Oct 20, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with netw