CVE-2026-60347
LowCVSS 3.6Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability in JD Edwards EnterpriseOne Tools version 9.2.26.3. Difficult to exploit, requires local access and low privileges. May lead to unauthorized data modification and partial denial of service.
Risk Assessment
An attacker could manipulate data in the ERP system, potentially disrupting business processes and data integrity.
Recommendation
It is recommended to apply patches provided by Oracle through the Critical Patch Update (CPU) program.
Other vulnerabilities in JD Edwards EnterpriseOne Tools
See all- CVE-2016-0424High
An unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC.
- CVE-2016-0423High
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability.
- CVE-2016-0422High
An unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC.
- CVE-2016-0420High
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics.
- CVE-2014-6565High
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC.
- CVE-2026-61272Critical
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Web Runtime SEC). Affected versions are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.8.
- CVE-2026-60627Critical
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security). Affected version is 9.2.26.3. A low-privileged attacker with network access via HTTP can compromise the tools, potentially impacting other products.
- CVE-2026-46913Critical
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle, concerning the installation security component. It allows an unauthenticated attacker with access to the infrastructure where JD Edwards EnterpriseOne Tools runs to compromise the tool.
- CVE-2026-46906Critical
A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle allows a low privileged attacker with network access via HTTP to compromise JD Edwards Tools. Attacks may significantly impact additional products, changing the scope of the threat.
- CVE-2026-46904Critical
A vulnerability in Oracle's JD Edwards EnterpriseOne Tools product allows an unauthenticated attacker with network access to compromise JD Edwards EnterpriseOne Tools. Versions 9.2.0.0-9.2.26.2 are affected by this easily exploitable vulnerability.
Original NVD description (English source)
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). The supported version that is affected is 9.2.26.3. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS