CVE-2026-60497

HighCVSS 7.5

Published: 21/07/2026(UTC)Updated: 06/08/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

Vulnerability in JD Edwards EnterpriseOne CRM Foundation (version 9.2) in CRM Foundation component. Difficult to exploit, low-privileged attacker via JDENET can take over the system.

Risk Assessment

Risk of full system takeover, potentially leading to customer data theft and disruption of business relationships.

Recommendation

Immediately apply Oracle patches and monitor JDENET traffic.

Other vulnerabilities in JD Edwards EnterpriseOne CRM Foundation

CVE-2026-60489High
Vulnerability in Oracle's JD Edwards EnterpriseOne CRM Foundation product (component: CRM Foundation). Affected version is 9.2. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne CRM Foundation.

Original NVD description (English source)

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne CRM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne CRM Foundation. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).