CVE-2026-46903
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk32th percentile — higher than 32% of all known CVEs
Summary
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, concerning business logic infrastructure security. Versions 9.2.0.0-9.2.26.2 are susceptible to easily exploitable attacks that can lead to takeover of JD Edwards EnterpriseOne Tools.
Risk Assessment
A low privileged attacker with network access via HTTP can easily exploit this vulnerability, posing a serious threat to the integrity and availability of the system.
Recommendation
It is recommended to update to the latest version of JD Edwards EnterpriseOne Tools to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infrastructure Security). Supported versions that are affected are 9.2.0.0-9.2.26.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).